<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en_US" lang="en_US">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
<title>SslHandler xref</title>
<link type="text/css" rel="stylesheet" href="../../../../../stylesheet.css" />
</head>
<body>
<div id="overview"><a href="../../../../../../api/org/jboss/netty/handler/ssl/SslHandler.html">View Javadoc</a></div><pre>

<a class="jxr_linenumber" name="1" href="#1">1</a>   <em class="jxr_comment">/*</em>
<a class="jxr_linenumber" name="2" href="#2">2</a>   <em class="jxr_comment"> * Copyright 2012 The Netty Project</em>
<a class="jxr_linenumber" name="3" href="#3">3</a>   <em class="jxr_comment"> *</em>
<a class="jxr_linenumber" name="4" href="#4">4</a>   <em class="jxr_comment"> * The Netty Project licenses this file to you under the Apache License,</em>
<a class="jxr_linenumber" name="5" href="#5">5</a>   <em class="jxr_comment"> * version 2.0 (the "License"); you may not use this file except in compliance</em>
<a class="jxr_linenumber" name="6" href="#6">6</a>   <em class="jxr_comment"> * with the License. You may obtain a copy of the License at:</em>
<a class="jxr_linenumber" name="7" href="#7">7</a>   <em class="jxr_comment"> *</em>
<a class="jxr_linenumber" name="8" href="#8">8</a>   <em class="jxr_comment"> *   <a href="http://www.apache.org/licenses/LICENSE-2.0" target="alexandria_uri">http://www.apache.org/licenses/LICENSE-2.0</a></em>
<a class="jxr_linenumber" name="9" href="#9">9</a>   <em class="jxr_comment"> *</em>
<a class="jxr_linenumber" name="10" href="#10">10</a>  <em class="jxr_comment"> * Unless required by applicable law or agreed to in writing, software</em>
<a class="jxr_linenumber" name="11" href="#11">11</a>  <em class="jxr_comment"> * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT</em>
<a class="jxr_linenumber" name="12" href="#12">12</a>  <em class="jxr_comment"> * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the</em>
<a class="jxr_linenumber" name="13" href="#13">13</a>  <em class="jxr_comment"> * License for the specific language governing permissions and limitations</em>
<a class="jxr_linenumber" name="14" href="#14">14</a>  <em class="jxr_comment"> * under the License.</em>
<a class="jxr_linenumber" name="15" href="#15">15</a>  <em class="jxr_comment"> */</em>
<a class="jxr_linenumber" name="16" href="#16">16</a>  <strong class="jxr_keyword">package</strong> org.jboss.netty.handler.ssl;
<a class="jxr_linenumber" name="17" href="#17">17</a>  
<a class="jxr_linenumber" name="18" href="#18">18</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.buffer.ChannelBuffer;
<a class="jxr_linenumber" name="19" href="#19">19</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.buffer.ChannelBufferFactory;
<a class="jxr_linenumber" name="20" href="#20">20</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.buffer.ChannelBuffers;
<a class="jxr_linenumber" name="21" href="#21">21</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.Channel;
<a class="jxr_linenumber" name="22" href="#22">22</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.ChannelDownstreamHandler;
<a class="jxr_linenumber" name="23" href="#23">23</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.ChannelEvent;
<a class="jxr_linenumber" name="24" href="#24">24</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.ChannelFuture;
<a class="jxr_linenumber" name="25" href="#25">25</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.ChannelFutureListener;
<a class="jxr_linenumber" name="26" href="#26">26</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.ChannelHandlerContext;
<a class="jxr_linenumber" name="27" href="#27">27</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.ChannelPipeline;
<a class="jxr_linenumber" name="28" href="#28">28</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.ChannelStateEvent;
<a class="jxr_linenumber" name="29" href="#29">29</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.Channels;
<a class="jxr_linenumber" name="30" href="#30">30</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.DefaultChannelFuture;
<a class="jxr_linenumber" name="31" href="#31">31</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.DownstreamMessageEvent;
<a class="jxr_linenumber" name="32" href="#32">32</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.ExceptionEvent;
<a class="jxr_linenumber" name="33" href="#33">33</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.channel.MessageEvent;
<a class="jxr_linenumber" name="34" href="#34">34</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.handler.codec.frame.FrameDecoder;
<a class="jxr_linenumber" name="35" href="#35">35</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.logging.InternalLogger;
<a class="jxr_linenumber" name="36" href="#36">36</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.logging.InternalLoggerFactory;
<a class="jxr_linenumber" name="37" href="#37">37</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.util.Timeout;
<a class="jxr_linenumber" name="38" href="#38">38</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.util.Timer;
<a class="jxr_linenumber" name="39" href="#39">39</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.util.TimerTask;
<a class="jxr_linenumber" name="40" href="#40">40</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.util.internal.DetectionUtil;
<a class="jxr_linenumber" name="41" href="#41">41</a>  <strong class="jxr_keyword">import</strong> org.jboss.netty.util.internal.NonReentrantLock;
<a class="jxr_linenumber" name="42" href="#42">42</a>  
<a class="jxr_linenumber" name="43" href="#43">43</a>  <strong class="jxr_keyword">import</strong> javax.net.ssl.SSLEngine;
<a class="jxr_linenumber" name="44" href="#44">44</a>  <strong class="jxr_keyword">import</strong> javax.net.ssl.SSLEngineResult;
<a class="jxr_linenumber" name="45" href="#45">45</a>  <strong class="jxr_keyword">import</strong> javax.net.ssl.SSLEngineResult.HandshakeStatus;
<a class="jxr_linenumber" name="46" href="#46">46</a>  <strong class="jxr_keyword">import</strong> javax.net.ssl.SSLEngineResult.Status;
<a class="jxr_linenumber" name="47" href="#47">47</a>  <strong class="jxr_keyword">import</strong> javax.net.ssl.SSLException;
<a class="jxr_linenumber" name="48" href="#48">48</a>  <strong class="jxr_keyword">import</strong> java.io.IOException;
<a class="jxr_linenumber" name="49" href="#49">49</a>  <strong class="jxr_keyword">import</strong> java.nio.ByteBuffer;
<a class="jxr_linenumber" name="50" href="#50">50</a>  <strong class="jxr_keyword">import</strong> java.nio.channels.ClosedChannelException;
<a class="jxr_linenumber" name="51" href="#51">51</a>  <strong class="jxr_keyword">import</strong> java.nio.channels.DatagramChannel;
<a class="jxr_linenumber" name="52" href="#52">52</a>  <strong class="jxr_keyword">import</strong> java.nio.channels.SocketChannel;
<a class="jxr_linenumber" name="53" href="#53">53</a>  <strong class="jxr_keyword">import</strong> java.util.ArrayList;
<a class="jxr_linenumber" name="54" href="#54">54</a>  <strong class="jxr_keyword">import</strong> java.util.LinkedList;
<a class="jxr_linenumber" name="55" href="#55">55</a>  <strong class="jxr_keyword">import</strong> java.util.List;
<a class="jxr_linenumber" name="56" href="#56">56</a>  <strong class="jxr_keyword">import</strong> java.util.Queue;
<a class="jxr_linenumber" name="57" href="#57">57</a>  <strong class="jxr_keyword">import</strong> java.util.concurrent.ConcurrentLinkedQueue;
<a class="jxr_linenumber" name="58" href="#58">58</a>  <strong class="jxr_keyword">import</strong> java.util.concurrent.TimeUnit;
<a class="jxr_linenumber" name="59" href="#59">59</a>  <strong class="jxr_keyword">import</strong> java.util.concurrent.atomic.AtomicIntegerFieldUpdater;
<a class="jxr_linenumber" name="60" href="#60">60</a>  <strong class="jxr_keyword">import</strong> java.util.regex.Pattern;
<a class="jxr_linenumber" name="61" href="#61">61</a>  
<a class="jxr_linenumber" name="62" href="#62">62</a>  <strong class="jxr_keyword">import</strong> <strong class="jxr_keyword">static</strong> org.jboss.netty.channel.Channels.*;
<a class="jxr_linenumber" name="63" href="#63">63</a>  
<a class="jxr_linenumber" name="64" href="#64">64</a>  <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="65" href="#65">65</a>  <em class="jxr_javadoccomment"> * Adds &lt;a href="<a href="http://en.wikipedia.org/wiki/Transport_Layer_Security" target="alexandria_uri">http://en.wikipedia.org/wiki/Transport_Layer_Security</a>"&gt;SSL</em>
<a class="jxr_linenumber" name="66" href="#66">66</a>  <em class="jxr_javadoccomment"> * &amp;middot; TLS&lt;/a&gt; and StartTLS support to a {@link Channel}.  Please refer</em>
<a class="jxr_linenumber" name="67" href="#67">67</a>  <em class="jxr_javadoccomment"> * to the &lt;strong&gt;"SecureChat"&lt;/strong&gt; example in the distribution or the web</em>
<a class="jxr_linenumber" name="68" href="#68">68</a>  <em class="jxr_javadoccomment"> * site for the detailed usage.</em>
<a class="jxr_linenumber" name="69" href="#69">69</a>  <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="70" href="#70">70</a>  <em class="jxr_javadoccomment"> * &lt;h3&gt;Beginning the handshake&lt;/h3&gt;</em>
<a class="jxr_linenumber" name="71" href="#71">71</a>  <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="72" href="#72">72</a>  <em class="jxr_javadoccomment"> * You must make sure not to write a message while the</em>
<a class="jxr_linenumber" name="73" href="#73">73</a>  <em class="jxr_javadoccomment"> * {@linkplain #handshake() handshake} is in progress unless you are</em>
<a class="jxr_linenumber" name="74" href="#74">74</a>  <em class="jxr_javadoccomment"> * renegotiating.  You will be notified by the {@link ChannelFuture} which is</em>
<a class="jxr_linenumber" name="75" href="#75">75</a>  <em class="jxr_javadoccomment"> * returned by the {@link #handshake()} method when the handshake</em>
<a class="jxr_linenumber" name="76" href="#76">76</a>  <em class="jxr_javadoccomment"> * process succeeds or fails.</em>
<a class="jxr_linenumber" name="77" href="#77">77</a>  <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="78" href="#78">78</a>  <em class="jxr_javadoccomment"> * &lt;h3&gt;Handshake&lt;/h3&gt;</em>
<a class="jxr_linenumber" name="79" href="#79">79</a>  <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="80" href="#80">80</a>  <em class="jxr_javadoccomment"> * If {@link #isIssueHandshake()} is {@code false}</em>
<a class="jxr_linenumber" name="81" href="#81">81</a>  <em class="jxr_javadoccomment"> * (default) you will need to take care of calling {@link #handshake()} by your own. In most</em>
<a class="jxr_linenumber" name="82" href="#82">82</a>  <em class="jxr_javadoccomment"> * situations were {@link SslHandler} is used in 'client mode' you want to issue a handshake once</em>
<a class="jxr_linenumber" name="83" href="#83">83</a>  <em class="jxr_javadoccomment"> * the connection was established. if {@link #setIssueHandshake(boolean)} is set to {@code true}</em>
<a class="jxr_linenumber" name="84" href="#84">84</a>  <em class="jxr_javadoccomment"> * you don't need to worry about this as the {@link SslHandler} will take care of it.</em>
<a class="jxr_linenumber" name="85" href="#85">85</a>  <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="86" href="#86">86</a>  <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="87" href="#87">87</a>  <em class="jxr_javadoccomment"> * &lt;h3&gt;Renegotiation&lt;/h3&gt;</em>
<a class="jxr_linenumber" name="88" href="#88">88</a>  <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="89" href="#89">89</a>  <em class="jxr_javadoccomment"> * If {@link #isEnableRenegotiation() enableRenegotiation} is {@code true}</em>
<a class="jxr_linenumber" name="90" href="#90">90</a>  <em class="jxr_javadoccomment"> * (default) and the initial handshake has been done successfully, you can call</em>
<a class="jxr_linenumber" name="91" href="#91">91</a>  <em class="jxr_javadoccomment"> * {@link #handshake()} to trigger the renegotiation.</em>
<a class="jxr_linenumber" name="92" href="#92">92</a>  <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="93" href="#93">93</a>  <em class="jxr_javadoccomment"> * If {@link #isEnableRenegotiation() enableRenegotiation} is {@code false},</em>
<a class="jxr_linenumber" name="94" href="#94">94</a>  <em class="jxr_javadoccomment"> * an attempt to trigger renegotiation will result in the connection closure.</em>
<a class="jxr_linenumber" name="95" href="#95">95</a>  <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="96" href="#96">96</a>  <em class="jxr_javadoccomment"> * Please note that TLS renegotiation had a security issue before.  If your</em>
<a class="jxr_linenumber" name="97" href="#97">97</a>  <em class="jxr_javadoccomment"> * runtime environment did not fix it, please make sure to disable TLS</em>
<a class="jxr_linenumber" name="98" href="#98">98</a>  <em class="jxr_javadoccomment"> * renegotiation by calling {@link #setEnableRenegotiation(boolean)} with</em>
<a class="jxr_linenumber" name="99" href="#99">99</a>  <em class="jxr_javadoccomment"> * {@code false}.  For more information, please refer to the following documents:</em>
<a class="jxr_linenumber" name="100" href="#100">100</a> <em class="jxr_javadoccomment"> * &lt;ul&gt;</em>
<a class="jxr_linenumber" name="101" href="#101">101</a> <em class="jxr_javadoccomment"> *   &lt;li&gt;&lt;a href="<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555" target="alexandria_uri">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555</a>"&gt;CVE-2009-3555&lt;/a&gt;&lt;/li&gt;</em>
<a class="jxr_linenumber" name="102" href="#102">102</a> <em class="jxr_javadoccomment"> *   &lt;li&gt;&lt;a href="<a href="http://www.ietf.org/rfc/rfc5746.txt" target="alexandria_uri">http://www.ietf.org/rfc/rfc5746.txt</a>"&gt;RFC5746&lt;/a&gt;&lt;/li&gt;</em>
<a class="jxr_linenumber" name="103" href="#103">103</a> <em class="jxr_javadoccomment"> *   &lt;li&gt;&lt;a href="<a href="http://www.oracle.com/technetwork/java/javase/documentation/tlsreadme2-176330.html" target="alexandria_uri">http://www.oracle.com/technetwork/java/javase/documentation/tlsreadme2-176330.html</a>"&gt;Phased</em>
<a class="jxr_linenumber" name="104" href="#104">104</a> <em class="jxr_javadoccomment"> *       Approach to Fixing the TLS Renegotiation Issue&lt;/a&gt;&lt;/li&gt;</em>
<a class="jxr_linenumber" name="105" href="#105">105</a> <em class="jxr_javadoccomment"> * &lt;/ul&gt;</em>
<a class="jxr_linenumber" name="106" href="#106">106</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="107" href="#107">107</a> <em class="jxr_javadoccomment"> * &lt;h3&gt;Closing the session&lt;/h3&gt;</em>
<a class="jxr_linenumber" name="108" href="#108">108</a> <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="109" href="#109">109</a> <em class="jxr_javadoccomment"> * To close the SSL session, the {@link #close()} method should be</em>
<a class="jxr_linenumber" name="110" href="#110">110</a> <em class="jxr_javadoccomment"> * called to send the {@code close_notify} message to the remote peer.  One</em>
<a class="jxr_linenumber" name="111" href="#111">111</a> <em class="jxr_javadoccomment"> * exception is when you close the {@link Channel} - {@link SslHandler}</em>
<a class="jxr_linenumber" name="112" href="#112">112</a> <em class="jxr_javadoccomment"> * intercepts the close request and send the {@code close_notify} message</em>
<a class="jxr_linenumber" name="113" href="#113">113</a> <em class="jxr_javadoccomment"> * before the channel closure automatically.  Once the SSL session is closed,</em>
<a class="jxr_linenumber" name="114" href="#114">114</a> <em class="jxr_javadoccomment"> * it is not reusable, and consequently you should create a new</em>
<a class="jxr_linenumber" name="115" href="#115">115</a> <em class="jxr_javadoccomment"> * {@link SslHandler} with a new {@link SSLEngine} as explained in the</em>
<a class="jxr_linenumber" name="116" href="#116">116</a> <em class="jxr_javadoccomment"> * following section.</em>
<a class="jxr_linenumber" name="117" href="#117">117</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="118" href="#118">118</a> <em class="jxr_javadoccomment"> * &lt;h3&gt;Restarting the session&lt;/h3&gt;</em>
<a class="jxr_linenumber" name="119" href="#119">119</a> <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="120" href="#120">120</a> <em class="jxr_javadoccomment"> * To restart the SSL session, you must remove the existing closed</em>
<a class="jxr_linenumber" name="121" href="#121">121</a> <em class="jxr_javadoccomment"> * {@link SslHandler} from the {@link ChannelPipeline}, insert a new</em>
<a class="jxr_linenumber" name="122" href="#122">122</a> <em class="jxr_javadoccomment"> * {@link SslHandler} with a new {@link SSLEngine} into the pipeline,</em>
<a class="jxr_linenumber" name="123" href="#123">123</a> <em class="jxr_javadoccomment"> * and start the handshake process as described in the first section.</em>
<a class="jxr_linenumber" name="124" href="#124">124</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="125" href="#125">125</a> <em class="jxr_javadoccomment"> * &lt;h3&gt;Implementing StartTLS&lt;/h3&gt;</em>
<a class="jxr_linenumber" name="126" href="#126">126</a> <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="127" href="#127">127</a> <em class="jxr_javadoccomment"> * &lt;a href="<a href="http://en.wikipedia.org/wiki/STARTTLS" target="alexandria_uri">http://en.wikipedia.org/wiki/STARTTLS</a>"&gt;StartTLS&lt;/a&gt; is the</em>
<a class="jxr_linenumber" name="128" href="#128">128</a> <em class="jxr_javadoccomment"> * communication pattern that secures the wire in the middle of the plaintext</em>
<a class="jxr_linenumber" name="129" href="#129">129</a> <em class="jxr_javadoccomment"> * connection.  Please note that it is different from SSL &amp;middot; TLS, that</em>
<a class="jxr_linenumber" name="130" href="#130">130</a> <em class="jxr_javadoccomment"> * secures the wire from the beginning of the connection.  Typically, StartTLS</em>
<a class="jxr_linenumber" name="131" href="#131">131</a> <em class="jxr_javadoccomment"> * is composed of three steps:</em>
<a class="jxr_linenumber" name="132" href="#132">132</a> <em class="jxr_javadoccomment"> * &lt;ol&gt;</em>
<a class="jxr_linenumber" name="133" href="#133">133</a> <em class="jxr_javadoccomment"> * &lt;li&gt;Client sends a StartTLS request to server.&lt;/li&gt;</em>
<a class="jxr_linenumber" name="134" href="#134">134</a> <em class="jxr_javadoccomment"> * &lt;li&gt;Server sends a StartTLS response to client.&lt;/li&gt;</em>
<a class="jxr_linenumber" name="135" href="#135">135</a> <em class="jxr_javadoccomment"> * &lt;li&gt;Client begins SSL handshake.&lt;/li&gt;</em>
<a class="jxr_linenumber" name="136" href="#136">136</a> <em class="jxr_javadoccomment"> * &lt;/ol&gt;</em>
<a class="jxr_linenumber" name="137" href="#137">137</a> <em class="jxr_javadoccomment"> * If you implement a server, you need to:</em>
<a class="jxr_linenumber" name="138" href="#138">138</a> <em class="jxr_javadoccomment"> * &lt;ol&gt;</em>
<a class="jxr_linenumber" name="139" href="#139">139</a> <em class="jxr_javadoccomment"> * &lt;li&gt;create a new {@link SslHandler} instance with {@code startTls} flag set</em>
<a class="jxr_linenumber" name="140" href="#140">140</a> <em class="jxr_javadoccomment"> *     to {@code true},&lt;/li&gt;</em>
<a class="jxr_linenumber" name="141" href="#141">141</a> <em class="jxr_javadoccomment"> * &lt;li&gt;insert the {@link SslHandler} to the {@link ChannelPipeline}, and&lt;/li&gt;</em>
<a class="jxr_linenumber" name="142" href="#142">142</a> <em class="jxr_javadoccomment"> * &lt;li&gt;write a StartTLS response.&lt;/li&gt;</em>
<a class="jxr_linenumber" name="143" href="#143">143</a> <em class="jxr_javadoccomment"> * &lt;/ol&gt;</em>
<a class="jxr_linenumber" name="144" href="#144">144</a> <em class="jxr_javadoccomment"> * Please note that you must insert {@link SslHandler} &lt;em&gt;before&lt;/em&gt; sending</em>
<a class="jxr_linenumber" name="145" href="#145">145</a> <em class="jxr_javadoccomment"> * the StartTLS response.  Otherwise the client can send begin SSL handshake</em>
<a class="jxr_linenumber" name="146" href="#146">146</a> <em class="jxr_javadoccomment"> * before {@link SslHandler} is inserted to the {@link ChannelPipeline}, causing</em>
<a class="jxr_linenumber" name="147" href="#147">147</a> <em class="jxr_javadoccomment"> * data corruption.</em>
<a class="jxr_linenumber" name="148" href="#148">148</a> <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="149" href="#149">149</a> <em class="jxr_javadoccomment"> * The client-side implementation is much simpler.</em>
<a class="jxr_linenumber" name="150" href="#150">150</a> <em class="jxr_javadoccomment"> * &lt;ol&gt;</em>
<a class="jxr_linenumber" name="151" href="#151">151</a> <em class="jxr_javadoccomment"> * &lt;li&gt;Write a StartTLS request,&lt;/li&gt;</em>
<a class="jxr_linenumber" name="152" href="#152">152</a> <em class="jxr_javadoccomment"> * &lt;li&gt;wait for the StartTLS response,&lt;/li&gt;</em>
<a class="jxr_linenumber" name="153" href="#153">153</a> <em class="jxr_javadoccomment"> * &lt;li&gt;create a new {@link SslHandler} instance with {@code startTls} flag set</em>
<a class="jxr_linenumber" name="154" href="#154">154</a> <em class="jxr_javadoccomment"> *     to {@code false},&lt;/li&gt;</em>
<a class="jxr_linenumber" name="155" href="#155">155</a> <em class="jxr_javadoccomment"> * &lt;li&gt;insert the {@link SslHandler} to the {@link ChannelPipeline}, and&lt;/li&gt;</em>
<a class="jxr_linenumber" name="156" href="#156">156</a> <em class="jxr_javadoccomment"> * &lt;li&gt;Initiate SSL handshake by calling {@link SslHandler#handshake()}.&lt;/li&gt;</em>
<a class="jxr_linenumber" name="157" href="#157">157</a> <em class="jxr_javadoccomment"> * &lt;/ol&gt;</em>
<a class="jxr_linenumber" name="158" href="#158">158</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="159" href="#159">159</a> <em class="jxr_javadoccomment"> * &lt;h3&gt;Known issues&lt;/h3&gt;</em>
<a class="jxr_linenumber" name="160" href="#160">160</a> <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="161" href="#161">161</a> <em class="jxr_javadoccomment"> * Because of a known issue with the current implementation of the SslEngine that comes</em>
<a class="jxr_linenumber" name="162" href="#162">162</a> <em class="jxr_javadoccomment"> * with Java it may be possible that you see blocked IO-Threads while a full GC is done.</em>
<a class="jxr_linenumber" name="163" href="#163">163</a> <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="164" href="#164">164</a> <em class="jxr_javadoccomment"> * So if you are affected you can workaround this problem by adjust the cache settings</em>
<a class="jxr_linenumber" name="165" href="#165">165</a> <em class="jxr_javadoccomment"> * like shown below:</em>
<a class="jxr_linenumber" name="166" href="#166">166</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="167" href="#167">167</a> <em class="jxr_javadoccomment"> * &lt;pre&gt;</em>
<a class="jxr_linenumber" name="168" href="#168">168</a> <em class="jxr_javadoccomment"> *     SslContext context = ...;</em>
<a class="jxr_linenumber" name="169" href="#169">169</a> <em class="jxr_javadoccomment"> *     context.getServerSessionContext().setSessionCacheSize(someSaneSize);</em>
<a class="jxr_linenumber" name="170" href="#170">170</a> <em class="jxr_javadoccomment"> *     context.getServerSessionContext().setSessionTime(someSameTimeout);</em>
<a class="jxr_linenumber" name="171" href="#171">171</a> <em class="jxr_javadoccomment"> * &lt;/pre&gt;</em>
<a class="jxr_linenumber" name="172" href="#172">172</a> <em class="jxr_javadoccomment"> * &lt;p&gt;</em>
<a class="jxr_linenumber" name="173" href="#173">173</a> <em class="jxr_javadoccomment"> * What values to use here depends on the nature of your application and should be set</em>
<a class="jxr_linenumber" name="174" href="#174">174</a> <em class="jxr_javadoccomment"> * based on monitoring and debugging of it.</em>
<a class="jxr_linenumber" name="175" href="#175">175</a> <em class="jxr_javadoccomment"> * For more details see</em>
<a class="jxr_linenumber" name="176" href="#176">176</a> <em class="jxr_javadoccomment"> * &lt;a href="https://github.com/netty/netty/issues/832"&gt;#832&lt;/a&gt; in our issue tracker.</em>
<a class="jxr_linenumber" name="177" href="#177">177</a> <em class="jxr_javadoccomment"> * @apiviz.landmark</em>
<a class="jxr_linenumber" name="178" href="#178">178</a> <em class="jxr_javadoccomment"> * @apiviz.uses org.jboss.netty.handler.ssl.SslBufferPool</em>
<a class="jxr_linenumber" name="179" href="#179">179</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="180" href="#180">180</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">SslHandler</a> <strong class="jxr_keyword">extends</strong> <a href="../../../../../org/jboss/netty/handler/codec/frame/FrameDecoder.html">FrameDecoder</a>
<a class="jxr_linenumber" name="181" href="#181">181</a>                         <strong class="jxr_keyword">implements</strong> <a href="../../../../../org/jboss/netty/channel/ChannelDownstreamHandler.html">ChannelDownstreamHandler</a> {
<a class="jxr_linenumber" name="182" href="#182">182</a> 
<a class="jxr_linenumber" name="183" href="#183">183</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/logging/InternalLogger.html">InternalLogger</a> logger = InternalLoggerFactory.getInstance(SslHandler.<strong class="jxr_keyword">class</strong>);
<a class="jxr_linenumber" name="184" href="#184">184</a> 
<a class="jxr_linenumber" name="185" href="#185">185</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> ByteBuffer EMPTY_BUFFER = ByteBuffer.allocate(0);
<a class="jxr_linenumber" name="186" href="#186">186</a> 
<a class="jxr_linenumber" name="187" href="#187">187</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> Pattern IGNORABLE_CLASS_IN_STACK = Pattern.compile(
<a class="jxr_linenumber" name="188" href="#188">188</a>             <span class="jxr_string">"^.*(?:Socket|Datagram|Sctp|Udt)Channel.*$"</span>);
<a class="jxr_linenumber" name="189" href="#189">189</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> Pattern IGNORABLE_ERROR_MESSAGE = Pattern.compile(
<a class="jxr_linenumber" name="190" href="#190">190</a>             <span class="jxr_string">"^.*(?:connection.*(?:reset|closed|abort|broken)|broken.*pipe).*$"</span>, Pattern.CASE_INSENSITIVE);
<a class="jxr_linenumber" name="191" href="#191">191</a> 
<a class="jxr_linenumber" name="192" href="#192">192</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslBufferPool.html">SslBufferPool</a> defaultBufferPool;
<a class="jxr_linenumber" name="193" href="#193">193</a> 
<a class="jxr_linenumber" name="194" href="#194">194</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="195" href="#195">195</a> <em class="jxr_javadoccomment">     * Returns the default {@link SslBufferPool} used when no pool is</em>
<a class="jxr_linenumber" name="196" href="#196">196</a> <em class="jxr_javadoccomment">     * specified in the constructor.</em>
<a class="jxr_linenumber" name="197" href="#197">197</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="198" href="#198">198</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">synchronized</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslBufferPool.html">SslBufferPool</a> getDefaultBufferPool() {
<a class="jxr_linenumber" name="199" href="#199">199</a>         <strong class="jxr_keyword">if</strong> (defaultBufferPool == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="200" href="#200">200</a>             defaultBufferPool = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslBufferPool.html">SslBufferPool</a>();
<a class="jxr_linenumber" name="201" href="#201">201</a>         }
<a class="jxr_linenumber" name="202" href="#202">202</a>         <strong class="jxr_keyword">return</strong> defaultBufferPool;
<a class="jxr_linenumber" name="203" href="#203">203</a>     }
<a class="jxr_linenumber" name="204" href="#204">204</a> 
<a class="jxr_linenumber" name="205" href="#205">205</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">volatile</strong> <a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx;
<a class="jxr_linenumber" name="206" href="#206">206</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> SSLEngine engine;
<a class="jxr_linenumber" name="207" href="#207">207</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslBufferPool.html">SslBufferPool</a> bufferPool;
<a class="jxr_linenumber" name="208" href="#208">208</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">boolean</strong> startTls;
<a class="jxr_linenumber" name="209" href="#209">209</a> 
<a class="jxr_linenumber" name="210" href="#210">210</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">volatile</strong> <strong class="jxr_keyword">boolean</strong> enableRenegotiation = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="211" href="#211">211</a> 
<a class="jxr_linenumber" name="212" href="#212">212</a>     <strong class="jxr_keyword">final</strong> Object handshakeLock = <strong class="jxr_keyword">new</strong> Object();
<a class="jxr_linenumber" name="213" href="#213">213</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">boolean</strong> handshaking;
<a class="jxr_linenumber" name="214" href="#214">214</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">volatile</strong> <strong class="jxr_keyword">boolean</strong> handshaken;
<a class="jxr_linenumber" name="215" href="#215">215</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">volatile</strong> <a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> handshakeFuture;
<a class="jxr_linenumber" name="216" href="#216">216</a> 
<a class="jxr_linenumber" name="217" href="#217">217</a>     @SuppressWarnings(<span class="jxr_string">"UnusedDeclaration"</span>)
<a class="jxr_linenumber" name="218" href="#218">218</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">volatile</strong> <strong class="jxr_keyword">int</strong> sentFirstMessage;
<a class="jxr_linenumber" name="219" href="#219">219</a>     @SuppressWarnings(<span class="jxr_string">"UnusedDeclaration"</span>)
<a class="jxr_linenumber" name="220" href="#220">220</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">volatile</strong> <strong class="jxr_keyword">int</strong> sentCloseNotify;
<a class="jxr_linenumber" name="221" href="#221">221</a>     @SuppressWarnings(<span class="jxr_string">"UnusedDeclaration"</span>)
<a class="jxr_linenumber" name="222" href="#222">222</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">volatile</strong> <strong class="jxr_keyword">int</strong> closedOutboundAndChannel;
<a class="jxr_linenumber" name="223" href="#223">223</a> 
<a class="jxr_linenumber" name="224" href="#224">224</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> AtomicIntegerFieldUpdater&lt;SslHandler&gt; SENT_FIRST_MESSAGE_UPDATER =
<a class="jxr_linenumber" name="225" href="#225">225</a>             AtomicIntegerFieldUpdater.newUpdater(SslHandler.<strong class="jxr_keyword">class</strong>, <span class="jxr_string">"sentFirstMessage"</span>);
<a class="jxr_linenumber" name="226" href="#226">226</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> AtomicIntegerFieldUpdater&lt;SslHandler&gt; SENT_CLOSE_NOTIFY_UPDATER =
<a class="jxr_linenumber" name="227" href="#227">227</a>             AtomicIntegerFieldUpdater.newUpdater(SslHandler.<strong class="jxr_keyword">class</strong>, <span class="jxr_string">"sentCloseNotify"</span>);
<a class="jxr_linenumber" name="228" href="#228">228</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> AtomicIntegerFieldUpdater&lt;SslHandler&gt; CLOSED_OUTBOUND_AND_CHANNEL_UPDATER =
<a class="jxr_linenumber" name="229" href="#229">229</a>             AtomicIntegerFieldUpdater.newUpdater(SslHandler.<strong class="jxr_keyword">class</strong>, <span class="jxr_string">"closedOutboundAndChannel"</span>);
<a class="jxr_linenumber" name="230" href="#230">230</a> 
<a class="jxr_linenumber" name="231" href="#231">231</a>     <strong class="jxr_keyword">int</strong> ignoreClosedChannelException;
<a class="jxr_linenumber" name="232" href="#232">232</a>     <strong class="jxr_keyword">final</strong> Object ignoreClosedChannelExceptionLock = <strong class="jxr_keyword">new</strong> Object();
<a class="jxr_linenumber" name="233" href="#233">233</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> Queue&lt;PendingWrite&gt; pendingUnencryptedWrites = <strong class="jxr_keyword">new</strong> LinkedList&lt;PendingWrite&gt;();
<a class="jxr_linenumber" name="234" href="#234">234</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/util/internal/NonReentrantLock.html">NonReentrantLock</a> pendingUnencryptedWritesLock = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/util/internal/NonReentrantLock.html">NonReentrantLock</a>();
<a class="jxr_linenumber" name="235" href="#235">235</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> Queue&lt;MessageEvent&gt; pendingEncryptedWrites = <strong class="jxr_keyword">new</strong> ConcurrentLinkedQueue&lt;MessageEvent&gt;();
<a class="jxr_linenumber" name="236" href="#236">236</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/util/internal/NonReentrantLock.html">NonReentrantLock</a> pendingEncryptedWritesLock = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/util/internal/NonReentrantLock.html">NonReentrantLock</a>();
<a class="jxr_linenumber" name="237" href="#237">237</a> 
<a class="jxr_linenumber" name="238" href="#238">238</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">volatile</strong> <strong class="jxr_keyword">boolean</strong> issueHandshake;
<a class="jxr_linenumber" name="239" href="#239">239</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">volatile</strong> <strong class="jxr_keyword">boolean</strong> writeBeforeHandshakeDone;
<a class="jxr_linenumber" name="240" href="#240">240</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">SSLEngineInboundCloseFuture</a> sslEngineCloseFuture = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">SSLEngineInboundCloseFuture</a>();
<a class="jxr_linenumber" name="241" href="#241">241</a> 
<a class="jxr_linenumber" name="242" href="#242">242</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">boolean</strong> closeOnSslException;
<a class="jxr_linenumber" name="243" href="#243">243</a> 
<a class="jxr_linenumber" name="244" href="#244">244</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">int</strong> packetLength;
<a class="jxr_linenumber" name="245" href="#245">245</a> 
<a class="jxr_linenumber" name="246" href="#246">246</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/util/Timer.html">Timer</a> timer;
<a class="jxr_linenumber" name="247" href="#247">247</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">long</strong> handshakeTimeoutInMillis;
<a class="jxr_linenumber" name="248" href="#248">248</a>     <strong class="jxr_keyword">private</strong> <a href="../../../../../org/jboss/netty/util/Timeout.html">Timeout</a> handshakeTimeout;
<a class="jxr_linenumber" name="249" href="#249">249</a> 
<a class="jxr_linenumber" name="250" href="#250">250</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="251" href="#251">251</a> <em class="jxr_javadoccomment">     * Creates a new instance.</em>
<a class="jxr_linenumber" name="252" href="#252">252</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="253" href="#253">253</a> <em class="jxr_javadoccomment">     * @param engine  the {@link SSLEngine} this handler will use</em>
<a class="jxr_linenumber" name="254" href="#254">254</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="255" href="#255">255</a>     <strong class="jxr_keyword">public</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">SslHandler</a>(SSLEngine engine) {
<a class="jxr_linenumber" name="256" href="#256">256</a>         <strong class="jxr_keyword">this</strong>(engine, getDefaultBufferPool(), false, <strong class="jxr_keyword">null</strong>, 0);
<a class="jxr_linenumber" name="257" href="#257">257</a>     }
<a class="jxr_linenumber" name="258" href="#258">258</a> 
<a class="jxr_linenumber" name="259" href="#259">259</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="260" href="#260">260</a> <em class="jxr_javadoccomment">     * Creates a new instance.</em>
<a class="jxr_linenumber" name="261" href="#261">261</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="262" href="#262">262</a> <em class="jxr_javadoccomment">     * @param engine      the {@link SSLEngine} this handler will use</em>
<a class="jxr_linenumber" name="263" href="#263">263</a> <em class="jxr_javadoccomment">     * @param bufferPool  the {@link SslBufferPool} where this handler will</em>
<a class="jxr_linenumber" name="264" href="#264">264</a> <em class="jxr_javadoccomment">     *                    acquire the buffers required by the {@link SSLEngine}</em>
<a class="jxr_linenumber" name="265" href="#265">265</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="266" href="#266">266</a>     <strong class="jxr_keyword">public</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">SslHandler</a>(SSLEngine engine, <a href="../../../../../org/jboss/netty/handler/ssl/SslBufferPool.html">SslBufferPool</a> bufferPool) {
<a class="jxr_linenumber" name="267" href="#267">267</a>         <strong class="jxr_keyword">this</strong>(engine, bufferPool, false, <strong class="jxr_keyword">null</strong>, 0);
<a class="jxr_linenumber" name="268" href="#268">268</a>     }
<a class="jxr_linenumber" name="269" href="#269">269</a> 
<a class="jxr_linenumber" name="270" href="#270">270</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="271" href="#271">271</a> <em class="jxr_javadoccomment">     * Creates a new instance.</em>
<a class="jxr_linenumber" name="272" href="#272">272</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="273" href="#273">273</a> <em class="jxr_javadoccomment">     * @param engine    the {@link SSLEngine} this handler will use</em>
<a class="jxr_linenumber" name="274" href="#274">274</a> <em class="jxr_javadoccomment">     * @param startTls  {@code true} if the first write request shouldn't be</em>
<a class="jxr_linenumber" name="275" href="#275">275</a> <em class="jxr_javadoccomment">     *                  encrypted by the {@link SSLEngine}</em>
<a class="jxr_linenumber" name="276" href="#276">276</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="277" href="#277">277</a>     <strong class="jxr_keyword">public</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">SslHandler</a>(SSLEngine engine, <strong class="jxr_keyword">boolean</strong> startTls) {
<a class="jxr_linenumber" name="278" href="#278">278</a>         <strong class="jxr_keyword">this</strong>(engine, getDefaultBufferPool(), startTls);
<a class="jxr_linenumber" name="279" href="#279">279</a>     }
<a class="jxr_linenumber" name="280" href="#280">280</a> 
<a class="jxr_linenumber" name="281" href="#281">281</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="282" href="#282">282</a> <em class="jxr_javadoccomment">     * Creates a new instance.</em>
<a class="jxr_linenumber" name="283" href="#283">283</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="284" href="#284">284</a> <em class="jxr_javadoccomment">     * @param engine      the {@link SSLEngine} this handler will use</em>
<a class="jxr_linenumber" name="285" href="#285">285</a> <em class="jxr_javadoccomment">     * @param bufferPool  the {@link SslBufferPool} where this handler will</em>
<a class="jxr_linenumber" name="286" href="#286">286</a> <em class="jxr_javadoccomment">     *                    acquire the buffers required by the {@link SSLEngine}</em>
<a class="jxr_linenumber" name="287" href="#287">287</a> <em class="jxr_javadoccomment">     * @param startTls    {@code true} if the first write request shouldn't be</em>
<a class="jxr_linenumber" name="288" href="#288">288</a> <em class="jxr_javadoccomment">     *                    encrypted by the {@link SSLEngine}</em>
<a class="jxr_linenumber" name="289" href="#289">289</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="290" href="#290">290</a>     <strong class="jxr_keyword">public</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">SslHandler</a>(SSLEngine engine, <a href="../../../../../org/jboss/netty/handler/ssl/SslBufferPool.html">SslBufferPool</a> bufferPool, <strong class="jxr_keyword">boolean</strong> startTls) {
<a class="jxr_linenumber" name="291" href="#291">291</a>         <strong class="jxr_keyword">this</strong>(engine, bufferPool, startTls, <strong class="jxr_keyword">null</strong>, 0);
<a class="jxr_linenumber" name="292" href="#292">292</a>     }
<a class="jxr_linenumber" name="293" href="#293">293</a> 
<a class="jxr_linenumber" name="294" href="#294">294</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="295" href="#295">295</a> <em class="jxr_javadoccomment">     * Creates a new instance.</em>
<a class="jxr_linenumber" name="296" href="#296">296</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="297" href="#297">297</a> <em class="jxr_javadoccomment">     * @param engine</em>
<a class="jxr_linenumber" name="298" href="#298">298</a> <em class="jxr_javadoccomment">     *        the {@link SSLEngine} this handler will use</em>
<a class="jxr_linenumber" name="299" href="#299">299</a> <em class="jxr_javadoccomment">     * @param bufferPool</em>
<a class="jxr_linenumber" name="300" href="#300">300</a> <em class="jxr_javadoccomment">     *        the {@link SslBufferPool} where this handler will acquire</em>
<a class="jxr_linenumber" name="301" href="#301">301</a> <em class="jxr_javadoccomment">     *        the buffers required by the {@link SSLEngine}</em>
<a class="jxr_linenumber" name="302" href="#302">302</a> <em class="jxr_javadoccomment">     * @param startTls</em>
<a class="jxr_linenumber" name="303" href="#303">303</a> <em class="jxr_javadoccomment">     *        {@code true} if the first write request shouldn't be encrypted</em>
<a class="jxr_linenumber" name="304" href="#304">304</a> <em class="jxr_javadoccomment">     *        by the {@link SSLEngine}</em>
<a class="jxr_linenumber" name="305" href="#305">305</a> <em class="jxr_javadoccomment">     * @param timer</em>
<a class="jxr_linenumber" name="306" href="#306">306</a> <em class="jxr_javadoccomment">     *        the {@link Timer} which will be used to process the timeout of the {@link #handshake()}.</em>
<a class="jxr_linenumber" name="307" href="#307">307</a> <em class="jxr_javadoccomment">     *        Be aware that the given {@link Timer} will not get stopped automaticly, so it is up to you to cleanup</em>
<a class="jxr_linenumber" name="308" href="#308">308</a> <em class="jxr_javadoccomment">     *        once you not need it anymore</em>
<a class="jxr_linenumber" name="309" href="#309">309</a> <em class="jxr_javadoccomment">     * @param handshakeTimeoutInMillis</em>
<a class="jxr_linenumber" name="310" href="#310">310</a> <em class="jxr_javadoccomment">     *        the time in milliseconds after whic the {@link #handshake()}  will be failed, and so the future notified</em>
<a class="jxr_linenumber" name="311" href="#311">311</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="312" href="#312">312</a>     <strong class="jxr_keyword">public</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">SslHandler</a>(SSLEngine engine, <a href="../../../../../org/jboss/netty/handler/ssl/SslBufferPool.html">SslBufferPool</a> bufferPool, <strong class="jxr_keyword">boolean</strong> startTls, <a href="../../../../../org/jboss/netty/util/Timer.html">Timer</a> timer,
<a class="jxr_linenumber" name="313" href="#313">313</a>                       <strong class="jxr_keyword">long</strong> handshakeTimeoutInMillis) {
<a class="jxr_linenumber" name="314" href="#314">314</a>         <strong class="jxr_keyword">if</strong> (engine == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="315" href="#315">315</a>             <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> NullPointerException(<span class="jxr_string">"engine"</span>);
<a class="jxr_linenumber" name="316" href="#316">316</a>         }
<a class="jxr_linenumber" name="317" href="#317">317</a>         <strong class="jxr_keyword">if</strong> (bufferPool == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="318" href="#318">318</a>             <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> NullPointerException(<span class="jxr_string">"bufferPool"</span>);
<a class="jxr_linenumber" name="319" href="#319">319</a>         }
<a class="jxr_linenumber" name="320" href="#320">320</a>         <strong class="jxr_keyword">if</strong> (timer == <strong class="jxr_keyword">null</strong> &amp;&amp; handshakeTimeoutInMillis &gt; 0) {
<a class="jxr_linenumber" name="321" href="#321">321</a>             <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> IllegalArgumentException(<span class="jxr_string">"No Timer was given but a handshakeTimeoutInMillis, need both or none"</span>);
<a class="jxr_linenumber" name="322" href="#322">322</a>         }
<a class="jxr_linenumber" name="323" href="#323">323</a> 
<a class="jxr_linenumber" name="324" href="#324">324</a>         <strong class="jxr_keyword">this</strong>.engine = engine;
<a class="jxr_linenumber" name="325" href="#325">325</a>         <strong class="jxr_keyword">this</strong>.bufferPool = bufferPool;
<a class="jxr_linenumber" name="326" href="#326">326</a>         <strong class="jxr_keyword">this</strong>.startTls = startTls;
<a class="jxr_linenumber" name="327" href="#327">327</a>         <strong class="jxr_keyword">this</strong>.timer = timer;
<a class="jxr_linenumber" name="328" href="#328">328</a>         <strong class="jxr_keyword">this</strong>.handshakeTimeoutInMillis = handshakeTimeoutInMillis;
<a class="jxr_linenumber" name="329" href="#329">329</a>     }
<a class="jxr_linenumber" name="330" href="#330">330</a> 
<a class="jxr_linenumber" name="331" href="#331">331</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="332" href="#332">332</a> <em class="jxr_javadoccomment">     * Returns the {@link SSLEngine} which is used by this handler.</em>
<a class="jxr_linenumber" name="333" href="#333">333</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="334" href="#334">334</a>     <strong class="jxr_keyword">public</strong> SSLEngine getEngine() {
<a class="jxr_linenumber" name="335" href="#335">335</a>         <strong class="jxr_keyword">return</strong> engine;
<a class="jxr_linenumber" name="336" href="#336">336</a>     }
<a class="jxr_linenumber" name="337" href="#337">337</a> 
<a class="jxr_linenumber" name="338" href="#338">338</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="339" href="#339">339</a> <em class="jxr_javadoccomment">     * Starts an SSL / TLS handshake for the specified channel.</em>
<a class="jxr_linenumber" name="340" href="#340">340</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="341" href="#341">341</a> <em class="jxr_javadoccomment">     * @return a {@link ChannelFuture} which is notified when the handshake</em>
<a class="jxr_linenumber" name="342" href="#342">342</a> <em class="jxr_javadoccomment">     *         succeeds or fails.</em>
<a class="jxr_linenumber" name="343" href="#343">343</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="344" href="#344">344</a>     <strong class="jxr_keyword">public</strong> <a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> handshake() {
<a class="jxr_linenumber" name="345" href="#345">345</a>         <strong class="jxr_keyword">synchronized</strong> (handshakeLock) {
<a class="jxr_linenumber" name="346" href="#346">346</a>             <strong class="jxr_keyword">if</strong> (handshaken &amp;&amp; !isEnableRenegotiation()) {
<a class="jxr_linenumber" name="347" href="#347">347</a>                 <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> IllegalStateException(<span class="jxr_string">"renegotiation disabled"</span>);
<a class="jxr_linenumber" name="348" href="#348">348</a>             }
<a class="jxr_linenumber" name="349" href="#349">349</a> 
<a class="jxr_linenumber" name="350" href="#350">350</a>             <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx = <strong class="jxr_keyword">this</strong>.ctx;
<a class="jxr_linenumber" name="351" href="#351">351</a>             <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/Channel.html">Channel</a> channel = ctx.getChannel();
<a class="jxr_linenumber" name="352" href="#352">352</a>             <a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> handshakeFuture;
<a class="jxr_linenumber" name="353" href="#353">353</a>             Exception exception = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="354" href="#354">354</a> 
<a class="jxr_linenumber" name="355" href="#355">355</a>             <strong class="jxr_keyword">if</strong> (handshaking) {
<a class="jxr_linenumber" name="356" href="#356">356</a>                 <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">this</strong>.handshakeFuture;
<a class="jxr_linenumber" name="357" href="#357">357</a>             }
<a class="jxr_linenumber" name="358" href="#358">358</a> 
<a class="jxr_linenumber" name="359" href="#359">359</a>             handshaking = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="360" href="#360">360</a>             <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="361" href="#361">361</a>                 engine.beginHandshake();
<a class="jxr_linenumber" name="362" href="#362">362</a>                 runDelegatedTasks();
<a class="jxr_linenumber" name="363" href="#363">363</a>                 handshakeFuture = <strong class="jxr_keyword">this</strong>.handshakeFuture = future(channel);
<a class="jxr_linenumber" name="364" href="#364">364</a>                 <strong class="jxr_keyword">if</strong> (handshakeTimeoutInMillis &gt; 0) {
<a class="jxr_linenumber" name="365" href="#365">365</a>                     handshakeTimeout = timer.newTimeout(<strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/util/TimerTask.html">TimerTask</a>() {
<a class="jxr_linenumber" name="366" href="#366">366</a>                             <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> run(<a href="../../../../../org/jboss/netty/util/Timeout.html">Timeout</a> timeout) <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="367" href="#367">367</a>                             <a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> future = SslHandler.<strong class="jxr_keyword">this</strong>.handshakeFuture;
<a class="jxr_linenumber" name="368" href="#368">368</a>                             <strong class="jxr_keyword">if</strong> (future != <strong class="jxr_keyword">null</strong> &amp;&amp; future.isDone()) {
<a class="jxr_linenumber" name="369" href="#369">369</a>                                 <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="370" href="#370">370</a>                             }
<a class="jxr_linenumber" name="371" href="#371">371</a> 
<a class="jxr_linenumber" name="372" href="#372">372</a>                             setHandshakeFailure(channel, <strong class="jxr_keyword">new</strong> SSLException(<span class="jxr_string">"Handshake did not complete within "</span> +
<a class="jxr_linenumber" name="373" href="#373">373</a>                                             handshakeTimeoutInMillis + <span class="jxr_string">"ms"</span>));
<a class="jxr_linenumber" name="374" href="#374">374</a>                         }
<a class="jxr_linenumber" name="375" href="#375">375</a>                         }, handshakeTimeoutInMillis, TimeUnit.MILLISECONDS);
<a class="jxr_linenumber" name="376" href="#376">376</a>                 }
<a class="jxr_linenumber" name="377" href="#377">377</a>             } <strong class="jxr_keyword">catch</strong> (Exception e) {
<a class="jxr_linenumber" name="378" href="#378">378</a>                 handshakeFuture = <strong class="jxr_keyword">this</strong>.handshakeFuture = failedFuture(channel, e);
<a class="jxr_linenumber" name="379" href="#379">379</a>                 exception = e;
<a class="jxr_linenumber" name="380" href="#380">380</a>             }
<a class="jxr_linenumber" name="381" href="#381">381</a> 
<a class="jxr_linenumber" name="382" href="#382">382</a>             <strong class="jxr_keyword">if</strong> (exception == <strong class="jxr_keyword">null</strong>) { <em class="jxr_comment">// Began handshake successfully.</em>
<a class="jxr_linenumber" name="383" href="#383">383</a>                 <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="384" href="#384">384</a>                     <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> hsFuture = handshakeFuture;
<a class="jxr_linenumber" name="385" href="#385">385</a>                     wrapNonAppData(ctx, channel).addListener(<strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/channel/ChannelFutureListener.html">ChannelFutureListener</a>() {
<a class="jxr_linenumber" name="386" href="#386">386</a>                         <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> operationComplete(<a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> future) <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="387" href="#387">387</a>                             <strong class="jxr_keyword">if</strong> (!future.isSuccess()) {
<a class="jxr_linenumber" name="388" href="#388">388</a>                                 Throwable cause = future.getCause();
<a class="jxr_linenumber" name="389" href="#389">389</a>                                 hsFuture.setFailure(cause);
<a class="jxr_linenumber" name="390" href="#390">390</a> 
<a class="jxr_linenumber" name="391" href="#391">391</a>                                 fireExceptionCaught(ctx, cause);
<a class="jxr_linenumber" name="392" href="#392">392</a>                                 <strong class="jxr_keyword">if</strong> (closeOnSslException) {
<a class="jxr_linenumber" name="393" href="#393">393</a>                                     Channels.close(ctx, future(channel));
<a class="jxr_linenumber" name="394" href="#394">394</a>                                 }
<a class="jxr_linenumber" name="395" href="#395">395</a>                             }
<a class="jxr_linenumber" name="396" href="#396">396</a>                         }
<a class="jxr_linenumber" name="397" href="#397">397</a>                     });
<a class="jxr_linenumber" name="398" href="#398">398</a>                 } <strong class="jxr_keyword">catch</strong> (SSLException e) {
<a class="jxr_linenumber" name="399" href="#399">399</a>                     handshakeFuture.setFailure(e);
<a class="jxr_linenumber" name="400" href="#400">400</a> 
<a class="jxr_linenumber" name="401" href="#401">401</a>                     fireExceptionCaught(ctx, e);
<a class="jxr_linenumber" name="402" href="#402">402</a>                     <strong class="jxr_keyword">if</strong> (closeOnSslException) {
<a class="jxr_linenumber" name="403" href="#403">403</a>                         Channels.close(ctx, future(channel));
<a class="jxr_linenumber" name="404" href="#404">404</a>                     }
<a class="jxr_linenumber" name="405" href="#405">405</a>                 }
<a class="jxr_linenumber" name="406" href="#406">406</a>             } <strong class="jxr_keyword">else</strong> { <em class="jxr_comment">// Failed to initiate handshake.</em>
<a class="jxr_linenumber" name="407" href="#407">407</a>                 fireExceptionCaught(ctx, exception);
<a class="jxr_linenumber" name="408" href="#408">408</a>                 <strong class="jxr_keyword">if</strong> (closeOnSslException) {
<a class="jxr_linenumber" name="409" href="#409">409</a>                     Channels.close(ctx, future(channel));
<a class="jxr_linenumber" name="410" href="#410">410</a>                 }
<a class="jxr_linenumber" name="411" href="#411">411</a>             }
<a class="jxr_linenumber" name="412" href="#412">412</a>             <strong class="jxr_keyword">return</strong> handshakeFuture;
<a class="jxr_linenumber" name="413" href="#413">413</a>         }
<a class="jxr_linenumber" name="414" href="#414">414</a>     }
<a class="jxr_linenumber" name="415" href="#415">415</a> 
<a class="jxr_linenumber" name="416" href="#416">416</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="417" href="#417">417</a> <em class="jxr_javadoccomment">     * Sends an SSL {@code close_notify} message to the specified channel and</em>
<a class="jxr_linenumber" name="418" href="#418">418</a> <em class="jxr_javadoccomment">     * destroys the underlying {@link SSLEngine}.</em>
<a class="jxr_linenumber" name="419" href="#419">419</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="420" href="#420">420</a>     <strong class="jxr_keyword">public</strong> <a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> close() {
<a class="jxr_linenumber" name="421" href="#421">421</a>         <a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx = <strong class="jxr_keyword">this</strong>.ctx;
<a class="jxr_linenumber" name="422" href="#422">422</a>         <a href="../../../../../org/jboss/netty/channel/Channel.html">Channel</a> channel = ctx.getChannel();
<a class="jxr_linenumber" name="423" href="#423">423</a>         <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="424" href="#424">424</a>             engine.closeOutbound();
<a class="jxr_linenumber" name="425" href="#425">425</a>             <strong class="jxr_keyword">return</strong> wrapNonAppData(ctx, channel);
<a class="jxr_linenumber" name="426" href="#426">426</a>         } <strong class="jxr_keyword">catch</strong> (SSLException e) {
<a class="jxr_linenumber" name="427" href="#427">427</a>             fireExceptionCaught(ctx, e);
<a class="jxr_linenumber" name="428" href="#428">428</a>             <strong class="jxr_keyword">if</strong> (closeOnSslException) {
<a class="jxr_linenumber" name="429" href="#429">429</a>                 Channels.close(ctx, future(channel));
<a class="jxr_linenumber" name="430" href="#430">430</a>             }
<a class="jxr_linenumber" name="431" href="#431">431</a>             <strong class="jxr_keyword">return</strong> failedFuture(channel, e);
<a class="jxr_linenumber" name="432" href="#432">432</a>         }
<a class="jxr_linenumber" name="433" href="#433">433</a>     }
<a class="jxr_linenumber" name="434" href="#434">434</a> 
<a class="jxr_linenumber" name="435" href="#435">435</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="436" href="#436">436</a> <em class="jxr_javadoccomment">     * Returns {@code true} if and only if TLS renegotiation is enabled.</em>
<a class="jxr_linenumber" name="437" href="#437">437</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="438" href="#438">438</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">boolean</strong> isEnableRenegotiation() {
<a class="jxr_linenumber" name="439" href="#439">439</a>         <strong class="jxr_keyword">return</strong> enableRenegotiation;
<a class="jxr_linenumber" name="440" href="#440">440</a>     }
<a class="jxr_linenumber" name="441" href="#441">441</a> 
<a class="jxr_linenumber" name="442" href="#442">442</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="443" href="#443">443</a> <em class="jxr_javadoccomment">     * Enables or disables TLS renegotiation.</em>
<a class="jxr_linenumber" name="444" href="#444">444</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="445" href="#445">445</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setEnableRenegotiation(<strong class="jxr_keyword">boolean</strong> enableRenegotiation) {
<a class="jxr_linenumber" name="446" href="#446">446</a>         <strong class="jxr_keyword">this</strong>.enableRenegotiation = enableRenegotiation;
<a class="jxr_linenumber" name="447" href="#447">447</a>     }
<a class="jxr_linenumber" name="448" href="#448">448</a> 
<a class="jxr_linenumber" name="449" href="#449">449</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="450" href="#450">450</a> <em class="jxr_javadoccomment">     * Enables or disables the automatic handshake once the {@link Channel} is</em>
<a class="jxr_linenumber" name="451" href="#451">451</a> <em class="jxr_javadoccomment">     * connected. The value will only have affect if its set before the</em>
<a class="jxr_linenumber" name="452" href="#452">452</a> <em class="jxr_javadoccomment">     * {@link Channel} is connected.</em>
<a class="jxr_linenumber" name="453" href="#453">453</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="454" href="#454">454</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setIssueHandshake(<strong class="jxr_keyword">boolean</strong> issueHandshake) {
<a class="jxr_linenumber" name="455" href="#455">455</a>         <strong class="jxr_keyword">this</strong>.issueHandshake = issueHandshake;
<a class="jxr_linenumber" name="456" href="#456">456</a>     }
<a class="jxr_linenumber" name="457" href="#457">457</a> 
<a class="jxr_linenumber" name="458" href="#458">458</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="459" href="#459">459</a> <em class="jxr_javadoccomment">     * Returns {@code true} if the automatic handshake is enabled</em>
<a class="jxr_linenumber" name="460" href="#460">460</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="461" href="#461">461</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">boolean</strong> isIssueHandshake() {
<a class="jxr_linenumber" name="462" href="#462">462</a>         <strong class="jxr_keyword">return</strong> issueHandshake;
<a class="jxr_linenumber" name="463" href="#463">463</a>     }
<a class="jxr_linenumber" name="464" href="#464">464</a> 
<a class="jxr_linenumber" name="465" href="#465">465</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="466" href="#466">466</a> <em class="jxr_javadoccomment">     * Return the {@link ChannelFuture} that will get notified if the inbound of the {@link SSLEngine} will get closed.</em>
<a class="jxr_linenumber" name="467" href="#467">467</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="468" href="#468">468</a> <em class="jxr_javadoccomment">     * This method will return the same {@link ChannelFuture} all the time.</em>
<a class="jxr_linenumber" name="469" href="#469">469</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="470" href="#470">470</a> <em class="jxr_javadoccomment">     * For more informations see the apidocs of {@link SSLEngine}</em>
<a class="jxr_linenumber" name="471" href="#471">471</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="472" href="#472">472</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="473" href="#473">473</a>     <strong class="jxr_keyword">public</strong> <a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> getSSLEngineInboundCloseFuture() {
<a class="jxr_linenumber" name="474" href="#474">474</a>         <strong class="jxr_keyword">return</strong> sslEngineCloseFuture;
<a class="jxr_linenumber" name="475" href="#475">475</a>     }
<a class="jxr_linenumber" name="476" href="#476">476</a> 
<a class="jxr_linenumber" name="477" href="#477">477</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="478" href="#478">478</a> <em class="jxr_javadoccomment">     * Return the timeout (in ms) after which the {@link ChannelFuture} of {@link #handshake()} will be failed, while</em>
<a class="jxr_linenumber" name="479" href="#479">479</a> <em class="jxr_javadoccomment">     * a handshake is in progress</em>
<a class="jxr_linenumber" name="480" href="#480">480</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="481" href="#481">481</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">long</strong> getHandshakeTimeout() {
<a class="jxr_linenumber" name="482" href="#482">482</a>         <strong class="jxr_keyword">return</strong> handshakeTimeoutInMillis;
<a class="jxr_linenumber" name="483" href="#483">483</a>     }
<a class="jxr_linenumber" name="484" href="#484">484</a> 
<a class="jxr_linenumber" name="485" href="#485">485</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="486" href="#486">486</a> <em class="jxr_javadoccomment">     * If set to {@code true}, the {@link Channel} will automatically get closed</em>
<a class="jxr_linenumber" name="487" href="#487">487</a> <em class="jxr_javadoccomment">     * one a {@link SSLException} was caught. This is most times what you want, as after this</em>
<a class="jxr_linenumber" name="488" href="#488">488</a> <em class="jxr_javadoccomment">     * its almost impossible to recover.</em>
<a class="jxr_linenumber" name="489" href="#489">489</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="490" href="#490">490</a> <em class="jxr_javadoccomment">     * Anyway the default is {@code false} to not break compatibility with older releases. This</em>
<a class="jxr_linenumber" name="491" href="#491">491</a> <em class="jxr_javadoccomment">     * will be changed to {@code true} in the next major release.</em>
<a class="jxr_linenumber" name="492" href="#492">492</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="493" href="#493">493</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="494" href="#494">494</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setCloseOnSSLException(<strong class="jxr_keyword">boolean</strong> closeOnSslException) {
<a class="jxr_linenumber" name="495" href="#495">495</a>         <strong class="jxr_keyword">if</strong> (ctx != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="496" href="#496">496</a>             <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> IllegalStateException(<span class="jxr_string">"Can only get changed before attached to ChannelPipeline"</span>);
<a class="jxr_linenumber" name="497" href="#497">497</a>         }
<a class="jxr_linenumber" name="498" href="#498">498</a>         <strong class="jxr_keyword">this</strong>.closeOnSslException = closeOnSslException;
<a class="jxr_linenumber" name="499" href="#499">499</a>     }
<a class="jxr_linenumber" name="500" href="#500">500</a> 
<a class="jxr_linenumber" name="501" href="#501">501</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">boolean</strong> getCloseOnSSLException() {
<a class="jxr_linenumber" name="502" href="#502">502</a>         <strong class="jxr_keyword">return</strong> closeOnSslException;
<a class="jxr_linenumber" name="503" href="#503">503</a>     }
<a class="jxr_linenumber" name="504" href="#504">504</a> 
<a class="jxr_linenumber" name="505" href="#505">505</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> handleDownstream(
<a class="jxr_linenumber" name="506" href="#506">506</a>             <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> context, <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelEvent.html">ChannelEvent</a> evt) <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="507" href="#507">507</a>         <strong class="jxr_keyword">if</strong> (evt instanceof ChannelStateEvent) {
<a class="jxr_linenumber" name="508" href="#508">508</a>             <a href="../../../../../org/jboss/netty/channel/ChannelStateEvent.html">ChannelStateEvent</a> e = (ChannelStateEvent) evt;
<a class="jxr_linenumber" name="509" href="#509">509</a>             <strong class="jxr_keyword">switch</strong> (e.getState()) {
<a class="jxr_linenumber" name="510" href="#510">510</a>             <strong class="jxr_keyword">case</strong> OPEN:
<a class="jxr_linenumber" name="511" href="#511">511</a>             <strong class="jxr_keyword">case</strong> CONNECTED:
<a class="jxr_linenumber" name="512" href="#512">512</a>             <strong class="jxr_keyword">case</strong> BOUND:
<a class="jxr_linenumber" name="513" href="#513">513</a>                 <strong class="jxr_keyword">if</strong> (Boolean.FALSE.equals(e.getValue()) || e.getValue() == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="514" href="#514">514</a>                     closeOutboundAndChannel(context, e);
<a class="jxr_linenumber" name="515" href="#515">515</a>                     <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="516" href="#516">516</a>                 }
<a class="jxr_linenumber" name="517" href="#517">517</a>             }
<a class="jxr_linenumber" name="518" href="#518">518</a>         }
<a class="jxr_linenumber" name="519" href="#519">519</a>         <strong class="jxr_keyword">if</strong> (!(evt instanceof MessageEvent)) {
<a class="jxr_linenumber" name="520" href="#520">520</a>             context.sendDownstream(evt);
<a class="jxr_linenumber" name="521" href="#521">521</a>             <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="522" href="#522">522</a>         }
<a class="jxr_linenumber" name="523" href="#523">523</a> 
<a class="jxr_linenumber" name="524" href="#524">524</a>         <a href="../../../../../org/jboss/netty/channel/MessageEvent.html">MessageEvent</a> e = (MessageEvent) evt;
<a class="jxr_linenumber" name="525" href="#525">525</a>         <strong class="jxr_keyword">if</strong> (!(e.getMessage() instanceof ChannelBuffer)) {
<a class="jxr_linenumber" name="526" href="#526">526</a>             context.sendDownstream(evt);
<a class="jxr_linenumber" name="527" href="#527">527</a>             <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="528" href="#528">528</a>         }
<a class="jxr_linenumber" name="529" href="#529">529</a> 
<a class="jxr_linenumber" name="530" href="#530">530</a>         <em class="jxr_comment">// Do not encrypt the first write request if this handler is</em>
<a class="jxr_linenumber" name="531" href="#531">531</a>         <em class="jxr_comment">// created with startTLS flag turned on.</em>
<a class="jxr_linenumber" name="532" href="#532">532</a>         <strong class="jxr_keyword">if</strong> (startTls &amp;&amp; SENT_FIRST_MESSAGE_UPDATER.compareAndSet(<strong class="jxr_keyword">this</strong>, 0, 1)) {
<a class="jxr_linenumber" name="533" href="#533">533</a>             context.sendDownstream(evt);
<a class="jxr_linenumber" name="534" href="#534">534</a>             <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="535" href="#535">535</a>         }
<a class="jxr_linenumber" name="536" href="#536">536</a> 
<a class="jxr_linenumber" name="537" href="#537">537</a>         <em class="jxr_comment">// Otherwise, all messages are encrypted.</em>
<a class="jxr_linenumber" name="538" href="#538">538</a>         <a href="../../../../../org/jboss/netty/buffer/ChannelBuffer.html">ChannelBuffer</a> msg = (ChannelBuffer) e.getMessage();
<a class="jxr_linenumber" name="539" href="#539">539</a>         <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">PendingWrite</a> pendingWrite;
<a class="jxr_linenumber" name="540" href="#540">540</a> 
<a class="jxr_linenumber" name="541" href="#541">541</a>         <strong class="jxr_keyword">if</strong> (msg.readable()) {
<a class="jxr_linenumber" name="542" href="#542">542</a>             pendingWrite = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">PendingWrite</a>(evt.getFuture(), msg.toByteBuffer(msg.readerIndex(), msg.readableBytes()));
<a class="jxr_linenumber" name="543" href="#543">543</a>         } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="544" href="#544">544</a>             pendingWrite = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">PendingWrite</a>(evt.getFuture(), <strong class="jxr_keyword">null</strong>);
<a class="jxr_linenumber" name="545" href="#545">545</a>         }
<a class="jxr_linenumber" name="546" href="#546">546</a> 
<a class="jxr_linenumber" name="547" href="#547">547</a>         pendingUnencryptedWritesLock.lock();
<a class="jxr_linenumber" name="548" href="#548">548</a>         <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="549" href="#549">549</a>             pendingUnencryptedWrites.add(pendingWrite);
<a class="jxr_linenumber" name="550" href="#550">550</a>         } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="551" href="#551">551</a>             pendingUnencryptedWritesLock.unlock();
<a class="jxr_linenumber" name="552" href="#552">552</a>         }
<a class="jxr_linenumber" name="553" href="#553">553</a> 
<a class="jxr_linenumber" name="554" href="#554">554</a>         <strong class="jxr_keyword">if</strong> (handshakeFuture == <strong class="jxr_keyword">null</strong> || !handshakeFuture.isDone()) {
<a class="jxr_linenumber" name="555" href="#555">555</a>             writeBeforeHandshakeDone = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="556" href="#556">556</a>         }
<a class="jxr_linenumber" name="557" href="#557">557</a>         wrap(context, evt.getChannel());
<a class="jxr_linenumber" name="558" href="#558">558</a>     }
<a class="jxr_linenumber" name="559" href="#559">559</a> 
<a class="jxr_linenumber" name="560" href="#560">560</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> cancelHandshakeTimeout() {
<a class="jxr_linenumber" name="561" href="#561">561</a>         <strong class="jxr_keyword">if</strong> (handshakeTimeout != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="562" href="#562">562</a>             <em class="jxr_comment">// cancel the task as we will fail the handshake future now</em>
<a class="jxr_linenumber" name="563" href="#563">563</a>             handshakeTimeout.cancel();
<a class="jxr_linenumber" name="564" href="#564">564</a>         }
<a class="jxr_linenumber" name="565" href="#565">565</a>     }
<a class="jxr_linenumber" name="566" href="#566">566</a> 
<a class="jxr_linenumber" name="567" href="#567">567</a>     @Override
<a class="jxr_linenumber" name="568" href="#568">568</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> channelDisconnected(<a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx, <a href="../../../../../org/jboss/netty/channel/ChannelStateEvent.html">ChannelStateEvent</a> e) <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="569" href="#569">569</a> 
<a class="jxr_linenumber" name="570" href="#570">570</a>         <em class="jxr_comment">// Make sure the handshake future is notified when a connection has</em>
<a class="jxr_linenumber" name="571" href="#571">571</a>         <em class="jxr_comment">// been closed during handshake.</em>
<a class="jxr_linenumber" name="572" href="#572">572</a>         <strong class="jxr_keyword">synchronized</strong> (handshakeLock) {
<a class="jxr_linenumber" name="573" href="#573">573</a>             <strong class="jxr_keyword">if</strong> (handshaking) {
<a class="jxr_linenumber" name="574" href="#574">574</a>                 cancelHandshakeTimeout();
<a class="jxr_linenumber" name="575" href="#575">575</a>                 handshakeFuture.setFailure(<strong class="jxr_keyword">new</strong> ClosedChannelException());
<a class="jxr_linenumber" name="576" href="#576">576</a>             }
<a class="jxr_linenumber" name="577" href="#577">577</a>         }
<a class="jxr_linenumber" name="578" href="#578">578</a> 
<a class="jxr_linenumber" name="579" href="#579">579</a>         <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="580" href="#580">580</a>             <strong class="jxr_keyword">super</strong>.channelDisconnected(ctx, e);
<a class="jxr_linenumber" name="581" href="#581">581</a>         } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="582" href="#582">582</a>             unwrapNonAppData(ctx, e.getChannel(), false);
<a class="jxr_linenumber" name="583" href="#583">583</a>             closeEngine();
<a class="jxr_linenumber" name="584" href="#584">584</a>         }
<a class="jxr_linenumber" name="585" href="#585">585</a>     }
<a class="jxr_linenumber" name="586" href="#586">586</a> 
<a class="jxr_linenumber" name="587" href="#587">587</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> closeEngine() {
<a class="jxr_linenumber" name="588" href="#588">588</a>         engine.closeOutbound();
<a class="jxr_linenumber" name="589" href="#589">589</a>         <strong class="jxr_keyword">if</strong> (sentCloseNotify == 0 &amp;&amp; handshaken) {
<a class="jxr_linenumber" name="590" href="#590">590</a>             <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="591" href="#591">591</a>                 engine.closeInbound();
<a class="jxr_linenumber" name="592" href="#592">592</a>             } <strong class="jxr_keyword">catch</strong> (SSLException ex) {
<a class="jxr_linenumber" name="593" href="#593">593</a>                 <strong class="jxr_keyword">if</strong> (logger.isDebugEnabled()) {
<a class="jxr_linenumber" name="594" href="#594">594</a>                     logger.debug(<span class="jxr_string">"Failed to clean up SSLEngine."</span>, ex);
<a class="jxr_linenumber" name="595" href="#595">595</a>                 }
<a class="jxr_linenumber" name="596" href="#596">596</a>             }
<a class="jxr_linenumber" name="597" href="#597">597</a>         }
<a class="jxr_linenumber" name="598" href="#598">598</a>     }
<a class="jxr_linenumber" name="599" href="#599">599</a> 
<a class="jxr_linenumber" name="600" href="#600">600</a>     @Override
<a class="jxr_linenumber" name="601" href="#601">601</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> exceptionCaught(<a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx, <a href="../../../../../org/jboss/netty/channel/ExceptionEvent.html">ExceptionEvent</a> e)
<a class="jxr_linenumber" name="602" href="#602">602</a>             <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="603" href="#603">603</a> 
<a class="jxr_linenumber" name="604" href="#604">604</a>         Throwable cause = e.getCause();
<a class="jxr_linenumber" name="605" href="#605">605</a>         <strong class="jxr_keyword">if</strong> (cause instanceof IOException) {
<a class="jxr_linenumber" name="606" href="#606">606</a>             <strong class="jxr_keyword">if</strong> (cause instanceof ClosedChannelException) {
<a class="jxr_linenumber" name="607" href="#607">607</a>                 <strong class="jxr_keyword">synchronized</strong> (ignoreClosedChannelExceptionLock) {
<a class="jxr_linenumber" name="608" href="#608">608</a>                     <strong class="jxr_keyword">if</strong> (ignoreClosedChannelException &gt; 0) {
<a class="jxr_linenumber" name="609" href="#609">609</a>                         ignoreClosedChannelException --;
<a class="jxr_linenumber" name="610" href="#610">610</a>                         <strong class="jxr_keyword">if</strong> (logger.isDebugEnabled()) {
<a class="jxr_linenumber" name="611" href="#611">611</a>                             logger.debug(
<a class="jxr_linenumber" name="612" href="#612">612</a>                                     <span class="jxr_string">"Swallowing an exception raised while "</span> +
<a class="jxr_linenumber" name="613" href="#613">613</a>                                     <span class="jxr_string">"writing non-app data"</span>, cause);
<a class="jxr_linenumber" name="614" href="#614">614</a>                         }
<a class="jxr_linenumber" name="615" href="#615">615</a> 
<a class="jxr_linenumber" name="616" href="#616">616</a>                         <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="617" href="#617">617</a>                     }
<a class="jxr_linenumber" name="618" href="#618">618</a>                 }
<a class="jxr_linenumber" name="619" href="#619">619</a>             } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="620" href="#620">620</a>                 <strong class="jxr_keyword">if</strong> (ignoreException(cause)) {
<a class="jxr_linenumber" name="621" href="#621">621</a>                     <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="622" href="#622">622</a>                 }
<a class="jxr_linenumber" name="623" href="#623">623</a>             }
<a class="jxr_linenumber" name="624" href="#624">624</a>         }
<a class="jxr_linenumber" name="625" href="#625">625</a> 
<a class="jxr_linenumber" name="626" href="#626">626</a>         ctx.sendUpstream(e);
<a class="jxr_linenumber" name="627" href="#627">627</a>     }
<a class="jxr_linenumber" name="628" href="#628">628</a> 
<a class="jxr_linenumber" name="629" href="#629">629</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="630" href="#630">630</a> <em class="jxr_javadoccomment">     * Checks if the given {@link Throwable} can be ignore and just "swallowed"</em>
<a class="jxr_linenumber" name="631" href="#631">631</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="632" href="#632">632</a> <em class="jxr_javadoccomment">     * When an ssl connection is closed a close_notify message is sent.</em>
<a class="jxr_linenumber" name="633" href="#633">633</a> <em class="jxr_javadoccomment">     * After that the peer also sends close_notify however, it's not mandatory to receive</em>
<a class="jxr_linenumber" name="634" href="#634">634</a> <em class="jxr_javadoccomment">     * the close_notify. The party who sent the initial close_notify can close the connection immediately</em>
<a class="jxr_linenumber" name="635" href="#635">635</a> <em class="jxr_javadoccomment">     * then the peer will get connection reset error.</em>
<a class="jxr_linenumber" name="636" href="#636">636</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="637" href="#637">637</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="638" href="#638">638</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">boolean</strong> ignoreException(Throwable t) {
<a class="jxr_linenumber" name="639" href="#639">639</a>         <strong class="jxr_keyword">if</strong> (!(t instanceof SSLException) &amp;&amp; t instanceof IOException &amp;&amp; engine.isOutboundDone()) {
<a class="jxr_linenumber" name="640" href="#640">640</a>             String message = String.valueOf(t.getMessage()).toLowerCase();
<a class="jxr_linenumber" name="641" href="#641">641</a> 
<a class="jxr_linenumber" name="642" href="#642">642</a>             <em class="jxr_comment">// first try to match connection reset / broke peer based on the regex. This is the fastest way</em>
<a class="jxr_linenumber" name="643" href="#643">643</a>             <em class="jxr_comment">// but may fail on different jdk impls or OS's</em>
<a class="jxr_linenumber" name="644" href="#644">644</a>             <strong class="jxr_keyword">if</strong> (IGNORABLE_ERROR_MESSAGE.matcher(message).matches()) {
<a class="jxr_linenumber" name="645" href="#645">645</a>                 <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="646" href="#646">646</a>             }
<a class="jxr_linenumber" name="647" href="#647">647</a> 
<a class="jxr_linenumber" name="648" href="#648">648</a>             <em class="jxr_comment">// Inspect the StackTraceElements to see if it was a connection reset / broken pipe or not</em>
<a class="jxr_linenumber" name="649" href="#649">649</a>             StackTraceElement[] elements = t.getStackTrace();
<a class="jxr_linenumber" name="650" href="#650">650</a>             <strong class="jxr_keyword">for</strong> (StackTraceElement element: elements) {
<a class="jxr_linenumber" name="651" href="#651">651</a>                 String classname = element.getClassName();
<a class="jxr_linenumber" name="652" href="#652">652</a>                 String methodname = element.getMethodName();
<a class="jxr_linenumber" name="653" href="#653">653</a> 
<a class="jxr_linenumber" name="654" href="#654">654</a>                 <em class="jxr_comment">// skip all classes that belong to the io.netty package</em>
<a class="jxr_linenumber" name="655" href="#655">655</a>                 <strong class="jxr_keyword">if</strong> (classname.startsWith(<span class="jxr_string">"org.jboss.netty."</span>)) {
<a class="jxr_linenumber" name="656" href="#656">656</a>                     <strong class="jxr_keyword">continue</strong>;
<a class="jxr_linenumber" name="657" href="#657">657</a>                 }
<a class="jxr_linenumber" name="658" href="#658">658</a> 
<a class="jxr_linenumber" name="659" href="#659">659</a>                 <em class="jxr_comment">// check if the method name is read if not skip it</em>
<a class="jxr_linenumber" name="660" href="#660">660</a>                 <strong class="jxr_keyword">if</strong> (!<span class="jxr_string">"read"</span>.equals(methodname)) {
<a class="jxr_linenumber" name="661" href="#661">661</a>                     <strong class="jxr_keyword">continue</strong>;
<a class="jxr_linenumber" name="662" href="#662">662</a>                 }
<a class="jxr_linenumber" name="663" href="#663">663</a> 
<a class="jxr_linenumber" name="664" href="#664">664</a>                 <em class="jxr_comment">// This will also match against SocketInputStream which is used by openjdk 7 and maybe</em>
<a class="jxr_linenumber" name="665" href="#665">665</a>                 <em class="jxr_comment">// also others</em>
<a class="jxr_linenumber" name="666" href="#666">666</a>                 <strong class="jxr_keyword">if</strong> (IGNORABLE_CLASS_IN_STACK.matcher(classname).matches()) {
<a class="jxr_linenumber" name="667" href="#667">667</a>                     <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="668" href="#668">668</a>                 }
<a class="jxr_linenumber" name="669" href="#669">669</a> 
<a class="jxr_linenumber" name="670" href="#670">670</a>                 <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="671" href="#671">671</a>                     <em class="jxr_comment">// No match by now.. Try to load the class via classloader and inspect it.</em>
<a class="jxr_linenumber" name="672" href="#672">672</a>                     <em class="jxr_comment">// This is mainly done as other JDK implementations may differ in name of</em>
<a class="jxr_linenumber" name="673" href="#673">673</a>                     <em class="jxr_comment">// the impl.</em>
<a class="jxr_linenumber" name="674" href="#674">674</a>                     Class&lt;?&gt; clazz = getClass().getClassLoader().loadClass(classname);
<a class="jxr_linenumber" name="675" href="#675">675</a> 
<a class="jxr_linenumber" name="676" href="#676">676</a>                     <strong class="jxr_keyword">if</strong> (SocketChannel.<strong class="jxr_keyword">class</strong>.isAssignableFrom(clazz)
<a class="jxr_linenumber" name="677" href="#677">677</a>                             || DatagramChannel.<strong class="jxr_keyword">class</strong>.isAssignableFrom(clazz)) {
<a class="jxr_linenumber" name="678" href="#678">678</a>                         <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="679" href="#679">679</a>                     }
<a class="jxr_linenumber" name="680" href="#680">680</a> 
<a class="jxr_linenumber" name="681" href="#681">681</a>                     <em class="jxr_comment">// also match against SctpChannel via String matching as it may not present.</em>
<a class="jxr_linenumber" name="682" href="#682">682</a>                     <strong class="jxr_keyword">if</strong> (DetectionUtil.javaVersion() &gt;= 7
<a class="jxr_linenumber" name="683" href="#683">683</a>                             &amp;&amp; <span class="jxr_string">"com.sun.nio.sctp.SctpChannel"</span>.equals(clazz.getSuperclass().getName())) {
<a class="jxr_linenumber" name="684" href="#684">684</a>                         <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="685" href="#685">685</a>                     }
<a class="jxr_linenumber" name="686" href="#686">686</a>                 } <strong class="jxr_keyword">catch</strong> (ClassNotFoundException e) {
<a class="jxr_linenumber" name="687" href="#687">687</a>                     <em class="jxr_comment">// This should not happen just ignore</em>
<a class="jxr_linenumber" name="688" href="#688">688</a>                 }
<a class="jxr_linenumber" name="689" href="#689">689</a>             }
<a class="jxr_linenumber" name="690" href="#690">690</a>         }
<a class="jxr_linenumber" name="691" href="#691">691</a> 
<a class="jxr_linenumber" name="692" href="#692">692</a>         <strong class="jxr_keyword">return</strong> false;
<a class="jxr_linenumber" name="693" href="#693">693</a>     }
<a class="jxr_linenumber" name="694" href="#694">694</a> 
<a class="jxr_linenumber" name="695" href="#695">695</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="696" href="#696">696</a> <em class="jxr_javadoccomment">     * Returns {@code true} if the given {@link ChannelBuffer} is encrypted. Be aware that this method</em>
<a class="jxr_linenumber" name="697" href="#697">697</a> <em class="jxr_javadoccomment">     * will not increase the readerIndex of the given {@link ChannelBuffer}.</em>
<a class="jxr_linenumber" name="698" href="#698">698</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="699" href="#699">699</a> <em class="jxr_javadoccomment">     * @param   buffer</em>
<a class="jxr_linenumber" name="700" href="#700">700</a> <em class="jxr_javadoccomment">     *                  The {@link ChannelBuffer} to read from. Be aware that it must have at least 5 bytes to read,</em>
<a class="jxr_linenumber" name="701" href="#701">701</a> <em class="jxr_javadoccomment">     *                  otherwise it will throw an {@link IllegalArgumentException}.</em>
<a class="jxr_linenumber" name="702" href="#702">702</a> <em class="jxr_javadoccomment">     * @return encrypted</em>
<a class="jxr_linenumber" name="703" href="#703">703</a> <em class="jxr_javadoccomment">     *                  {@code true} if the {@link ChannelBuffer} is encrypted, {@code false} otherwise.</em>
<a class="jxr_linenumber" name="704" href="#704">704</a> <em class="jxr_javadoccomment">     * @throws IllegalArgumentException</em>
<a class="jxr_linenumber" name="705" href="#705">705</a> <em class="jxr_javadoccomment">     *                  Is thrown if the given {@link ChannelBuffer} has not at least 5 bytes to read.</em>
<a class="jxr_linenumber" name="706" href="#706">706</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="707" href="#707">707</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">boolean</strong> isEncrypted(<a href="../../../../../org/jboss/netty/buffer/ChannelBuffer.html">ChannelBuffer</a> buffer) {
<a class="jxr_linenumber" name="708" href="#708">708</a>         <strong class="jxr_keyword">return</strong> getEncryptedPacketLength(buffer, buffer.readerIndex()) != -1;
<a class="jxr_linenumber" name="709" href="#709">709</a>     }
<a class="jxr_linenumber" name="710" href="#710">710</a> 
<a class="jxr_linenumber" name="711" href="#711">711</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="712" href="#712">712</a> <em class="jxr_javadoccomment">     * Return how much bytes can be read out of the encrypted data. Be aware that this method will not increase</em>
<a class="jxr_linenumber" name="713" href="#713">713</a> <em class="jxr_javadoccomment">     * the readerIndex of the given {@link ChannelBuffer}.</em>
<a class="jxr_linenumber" name="714" href="#714">714</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="715" href="#715">715</a> <em class="jxr_javadoccomment">     * @param   buffer</em>
<a class="jxr_linenumber" name="716" href="#716">716</a> <em class="jxr_javadoccomment">     *                  The {@link ChannelBuffer} to read from. Be aware that it must have at least 5 bytes to read,</em>
<a class="jxr_linenumber" name="717" href="#717">717</a> <em class="jxr_javadoccomment">     *                  otherwise it will throw an {@link IllegalArgumentException}.</em>
<a class="jxr_linenumber" name="718" href="#718">718</a> <em class="jxr_javadoccomment">     * @return length</em>
<a class="jxr_linenumber" name="719" href="#719">719</a> <em class="jxr_javadoccomment">     *                  The length of the encrypted packet that is included in the buffer. This will</em>
<a class="jxr_linenumber" name="720" href="#720">720</a> <em class="jxr_javadoccomment">     *                  return {@code -1} if the given {@link ChannelBuffer} is not encrypted at all.</em>
<a class="jxr_linenumber" name="721" href="#721">721</a> <em class="jxr_javadoccomment">     * @throws IllegalArgumentException</em>
<a class="jxr_linenumber" name="722" href="#722">722</a> <em class="jxr_javadoccomment">     *                  Is thrown if the given {@link ChannelBuffer} has not at least 5 bytes to read.</em>
<a class="jxr_linenumber" name="723" href="#723">723</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="724" href="#724">724</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">int</strong> getEncryptedPacketLength(<a href="../../../../../org/jboss/netty/buffer/ChannelBuffer.html">ChannelBuffer</a> buffer, <strong class="jxr_keyword">int</strong> offset) {
<a class="jxr_linenumber" name="725" href="#725">725</a>         <strong class="jxr_keyword">int</strong> packetLength = 0;
<a class="jxr_linenumber" name="726" href="#726">726</a> 
<a class="jxr_linenumber" name="727" href="#727">727</a>         <em class="jxr_comment">// SSLv3 or TLS - Check ContentType</em>
<a class="jxr_linenumber" name="728" href="#728">728</a>         <strong class="jxr_keyword">boolean</strong> tls;
<a class="jxr_linenumber" name="729" href="#729">729</a>         <strong class="jxr_keyword">switch</strong> (buffer.getUnsignedByte(offset)) {
<a class="jxr_linenumber" name="730" href="#730">730</a>             <strong class="jxr_keyword">case</strong> 20:  <em class="jxr_comment">// change_cipher_spec</em>
<a class="jxr_linenumber" name="731" href="#731">731</a>             <strong class="jxr_keyword">case</strong> 21:  <em class="jxr_comment">// alert</em>
<a class="jxr_linenumber" name="732" href="#732">732</a>             <strong class="jxr_keyword">case</strong> 22:  <em class="jxr_comment">// handshake</em>
<a class="jxr_linenumber" name="733" href="#733">733</a>             <strong class="jxr_keyword">case</strong> 23:  <em class="jxr_comment">// application_data</em>
<a class="jxr_linenumber" name="734" href="#734">734</a>                 tls = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="735" href="#735">735</a>                 <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="736" href="#736">736</a>             <strong class="jxr_keyword">default</strong>:
<a class="jxr_linenumber" name="737" href="#737">737</a>                 <em class="jxr_comment">// SSLv2 or bad data</em>
<a class="jxr_linenumber" name="738" href="#738">738</a>                 tls = false;
<a class="jxr_linenumber" name="739" href="#739">739</a>         }
<a class="jxr_linenumber" name="740" href="#740">740</a> 
<a class="jxr_linenumber" name="741" href="#741">741</a>         <strong class="jxr_keyword">if</strong> (tls) {
<a class="jxr_linenumber" name="742" href="#742">742</a>             <em class="jxr_comment">// SSLv3 or TLS - Check ProtocolVersion</em>
<a class="jxr_linenumber" name="743" href="#743">743</a>             <strong class="jxr_keyword">int</strong> majorVersion = buffer.getUnsignedByte(offset + 1);
<a class="jxr_linenumber" name="744" href="#744">744</a>             <strong class="jxr_keyword">if</strong> (majorVersion == 3) {
<a class="jxr_linenumber" name="745" href="#745">745</a>                 <em class="jxr_comment">// SSLv3 or TLS</em>
<a class="jxr_linenumber" name="746" href="#746">746</a>                 packetLength = (getShort(buffer, offset + 3) &amp; 0xFFFF) + 5;
<a class="jxr_linenumber" name="747" href="#747">747</a>                 <strong class="jxr_keyword">if</strong> (packetLength &lt;= 5) {
<a class="jxr_linenumber" name="748" href="#748">748</a>                     <em class="jxr_comment">// Neither SSLv3 or TLSv1 (i.e. SSLv2 or bad data)</em>
<a class="jxr_linenumber" name="749" href="#749">749</a>                     tls = false;
<a class="jxr_linenumber" name="750" href="#750">750</a>                 }
<a class="jxr_linenumber" name="751" href="#751">751</a>             } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="752" href="#752">752</a>                 <em class="jxr_comment">// Neither SSLv3 or TLSv1 (i.e. SSLv2 or bad data)</em>
<a class="jxr_linenumber" name="753" href="#753">753</a>                 tls = false;
<a class="jxr_linenumber" name="754" href="#754">754</a>             }
<a class="jxr_linenumber" name="755" href="#755">755</a>         }
<a class="jxr_linenumber" name="756" href="#756">756</a> 
<a class="jxr_linenumber" name="757" href="#757">757</a>         <strong class="jxr_keyword">if</strong> (!tls) {
<a class="jxr_linenumber" name="758" href="#758">758</a>             <em class="jxr_comment">// SSLv2 or bad data - Check the version</em>
<a class="jxr_linenumber" name="759" href="#759">759</a>             <strong class="jxr_keyword">boolean</strong> sslv2 = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="760" href="#760">760</a>             <strong class="jxr_keyword">int</strong> headerLength = (buffer.getUnsignedByte(offset) &amp; 0x80) != 0 ? 2 : 3;
<a class="jxr_linenumber" name="761" href="#761">761</a>             <strong class="jxr_keyword">int</strong> majorVersion = buffer.getUnsignedByte(offset + headerLength + 1);
<a class="jxr_linenumber" name="762" href="#762">762</a>             <strong class="jxr_keyword">if</strong> (majorVersion == 2 || majorVersion == 3) {
<a class="jxr_linenumber" name="763" href="#763">763</a>                 <em class="jxr_comment">// SSLv2</em>
<a class="jxr_linenumber" name="764" href="#764">764</a>                 <strong class="jxr_keyword">if</strong> (headerLength == 2) {
<a class="jxr_linenumber" name="765" href="#765">765</a>                     packetLength = (getShort(buffer, offset) &amp; 0x7FFF) + 2;
<a class="jxr_linenumber" name="766" href="#766">766</a>                 } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="767" href="#767">767</a>                     packetLength = (getShort(buffer, offset) &amp; 0x3FFF) + 3;
<a class="jxr_linenumber" name="768" href="#768">768</a>                 }
<a class="jxr_linenumber" name="769" href="#769">769</a>                 <strong class="jxr_keyword">if</strong> (packetLength &lt;= headerLength) {
<a class="jxr_linenumber" name="770" href="#770">770</a>                     sslv2 = false;
<a class="jxr_linenumber" name="771" href="#771">771</a>                 }
<a class="jxr_linenumber" name="772" href="#772">772</a>             } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="773" href="#773">773</a>                 sslv2 = false;
<a class="jxr_linenumber" name="774" href="#774">774</a>             }
<a class="jxr_linenumber" name="775" href="#775">775</a> 
<a class="jxr_linenumber" name="776" href="#776">776</a>             <strong class="jxr_keyword">if</strong> (!sslv2) {
<a class="jxr_linenumber" name="777" href="#777">777</a>                 <strong class="jxr_keyword">return</strong> -1;
<a class="jxr_linenumber" name="778" href="#778">778</a>             }
<a class="jxr_linenumber" name="779" href="#779">779</a>         }
<a class="jxr_linenumber" name="780" href="#780">780</a>         <strong class="jxr_keyword">return</strong> packetLength;
<a class="jxr_linenumber" name="781" href="#781">781</a>     }
<a class="jxr_linenumber" name="782" href="#782">782</a> 
<a class="jxr_linenumber" name="783" href="#783">783</a>     @Override
<a class="jxr_linenumber" name="784" href="#784">784</a>     <strong class="jxr_keyword">protected</strong> Object decode(
<a class="jxr_linenumber" name="785" href="#785">785</a>             <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx, <a href="../../../../../org/jboss/netty/channel/Channel.html">Channel</a> channel, <a href="../../../../../org/jboss/netty/buffer/ChannelBuffer.html">ChannelBuffer</a> in) <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="786" href="#786">786</a> 
<a class="jxr_linenumber" name="787" href="#787">787</a>         <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">int</strong> startOffset = in.readerIndex();
<a class="jxr_linenumber" name="788" href="#788">788</a>         <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">int</strong> endOffset = in.writerIndex();
<a class="jxr_linenumber" name="789" href="#789">789</a>         <strong class="jxr_keyword">int</strong> offset = startOffset;
<a class="jxr_linenumber" name="790" href="#790">790</a>         <strong class="jxr_keyword">int</strong> totalLength = 0;
<a class="jxr_linenumber" name="791" href="#791">791</a> 
<a class="jxr_linenumber" name="792" href="#792">792</a>         <em class="jxr_comment">// If we calculated the length of the current SSL record before, use that information.</em>
<a class="jxr_linenumber" name="793" href="#793">793</a>         <strong class="jxr_keyword">if</strong> (packetLength &gt; 0) {
<a class="jxr_linenumber" name="794" href="#794">794</a>             <strong class="jxr_keyword">if</strong> (endOffset - startOffset &lt; packetLength) {
<a class="jxr_linenumber" name="795" href="#795">795</a>                 <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="796" href="#796">796</a>             } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="797" href="#797">797</a>                 offset += packetLength;
<a class="jxr_linenumber" name="798" href="#798">798</a>                 totalLength = packetLength;
<a class="jxr_linenumber" name="799" href="#799">799</a>                 packetLength = 0;
<a class="jxr_linenumber" name="800" href="#800">800</a>             }
<a class="jxr_linenumber" name="801" href="#801">801</a>         }
<a class="jxr_linenumber" name="802" href="#802">802</a> 
<a class="jxr_linenumber" name="803" href="#803">803</a>         <strong class="jxr_keyword">boolean</strong> nonSslRecord = false;
<a class="jxr_linenumber" name="804" href="#804">804</a> 
<a class="jxr_linenumber" name="805" href="#805">805</a>         <strong class="jxr_keyword">while</strong> (totalLength &lt; OpenSslEngine.MAX_ENCRYPTED_PACKET_LENGTH) {
<a class="jxr_linenumber" name="806" href="#806">806</a>             <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">int</strong> readableBytes = endOffset - offset;
<a class="jxr_linenumber" name="807" href="#807">807</a>             <strong class="jxr_keyword">if</strong> (readableBytes &lt; 5) {
<a class="jxr_linenumber" name="808" href="#808">808</a>                 <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="809" href="#809">809</a>             }
<a class="jxr_linenumber" name="810" href="#810">810</a> 
<a class="jxr_linenumber" name="811" href="#811">811</a>             <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">int</strong> packetLength = getEncryptedPacketLength(in, offset);
<a class="jxr_linenumber" name="812" href="#812">812</a>             <strong class="jxr_keyword">if</strong> (packetLength == -1) {
<a class="jxr_linenumber" name="813" href="#813">813</a>                 nonSslRecord = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="814" href="#814">814</a>                 <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="815" href="#815">815</a>             }
<a class="jxr_linenumber" name="816" href="#816">816</a> 
<a class="jxr_linenumber" name="817" href="#817">817</a>             assert packetLength &gt; 0;
<a class="jxr_linenumber" name="818" href="#818">818</a> 
<a class="jxr_linenumber" name="819" href="#819">819</a>             <strong class="jxr_keyword">if</strong> (packetLength &gt; readableBytes) {
<a class="jxr_linenumber" name="820" href="#820">820</a>                 <em class="jxr_comment">// wait until the whole packet can be read</em>
<a class="jxr_linenumber" name="821" href="#821">821</a>                 <strong class="jxr_keyword">this</strong>.packetLength = packetLength;
<a class="jxr_linenumber" name="822" href="#822">822</a>                 <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="823" href="#823">823</a>             }
<a class="jxr_linenumber" name="824" href="#824">824</a> 
<a class="jxr_linenumber" name="825" href="#825">825</a>             <strong class="jxr_keyword">int</strong> newTotalLength = totalLength + packetLength;
<a class="jxr_linenumber" name="826" href="#826">826</a>             <strong class="jxr_keyword">if</strong> (newTotalLength &gt; OpenSslEngine.MAX_ENCRYPTED_PACKET_LENGTH) {
<a class="jxr_linenumber" name="827" href="#827">827</a>                 <em class="jxr_comment">// Don't read too much.</em>
<a class="jxr_linenumber" name="828" href="#828">828</a>                 <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="829" href="#829">829</a>             }
<a class="jxr_linenumber" name="830" href="#830">830</a> 
<a class="jxr_linenumber" name="831" href="#831">831</a>             <em class="jxr_comment">// We have a whole packet.</em>
<a class="jxr_linenumber" name="832" href="#832">832</a>             <em class="jxr_comment">// Increment the offset to handle the next packet.</em>
<a class="jxr_linenumber" name="833" href="#833">833</a>             offset += packetLength;
<a class="jxr_linenumber" name="834" href="#834">834</a>             totalLength = newTotalLength;
<a class="jxr_linenumber" name="835" href="#835">835</a>         }
<a class="jxr_linenumber" name="836" href="#836">836</a> 
<a class="jxr_linenumber" name="837" href="#837">837</a>         <a href="../../../../../org/jboss/netty/buffer/ChannelBuffer.html">ChannelBuffer</a> unwrapped = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="838" href="#838">838</a>         <strong class="jxr_keyword">if</strong> (totalLength &gt; 0) {
<a class="jxr_linenumber" name="839" href="#839">839</a>             <em class="jxr_comment">// The buffer contains one or more full SSL records.</em>
<a class="jxr_linenumber" name="840" href="#840">840</a>             <em class="jxr_comment">// Slice out the whole packet so unwrap will only be called with complete packets.</em>
<a class="jxr_linenumber" name="841" href="#841">841</a>             <em class="jxr_comment">// Also directly reset the packetLength. This is needed as unwrap(..) may trigger</em>
<a class="jxr_linenumber" name="842" href="#842">842</a>             <em class="jxr_comment">// decode(...) again via:</em>
<a class="jxr_linenumber" name="843" href="#843">843</a>             <em class="jxr_comment">// 1) unwrap(..) is called</em>
<a class="jxr_linenumber" name="844" href="#844">844</a>             <em class="jxr_comment">// 2) wrap(...) is called from within unwrap(...)</em>
<a class="jxr_linenumber" name="845" href="#845">845</a>             <em class="jxr_comment">// 3) wrap(...) calls unwrapLater(...)</em>
<a class="jxr_linenumber" name="846" href="#846">846</a>             <em class="jxr_comment">// 4) unwrapLater(...) calls decode(...)</em>
<a class="jxr_linenumber" name="847" href="#847">847</a>             <em class="jxr_comment">//</em>
<a class="jxr_linenumber" name="848" href="#848">848</a>             <em class="jxr_comment">// See https://github.com/netty/netty/issues/1534</em>
<a class="jxr_linenumber" name="849" href="#849">849</a> 
<a class="jxr_linenumber" name="850" href="#850">850</a>             in.skipBytes(totalLength);
<a class="jxr_linenumber" name="851" href="#851">851</a>             <strong class="jxr_keyword">final</strong> ByteBuffer inNetBuf = in.toByteBuffer(startOffset, totalLength);
<a class="jxr_linenumber" name="852" href="#852">852</a>             unwrapped = unwrap(ctx, channel, inNetBuf, totalLength, <strong class="jxr_keyword">true</strong>);
<a class="jxr_linenumber" name="853" href="#853">853</a>         }
<a class="jxr_linenumber" name="854" href="#854">854</a> 
<a class="jxr_linenumber" name="855" href="#855">855</a>         <strong class="jxr_keyword">if</strong> (nonSslRecord) {
<a class="jxr_linenumber" name="856" href="#856">856</a>             <em class="jxr_comment">// Not an SSL/TLS packet</em>
<a class="jxr_linenumber" name="857" href="#857">857</a>             <a href="../../../../../org/jboss/netty/handler/ssl/NotSslRecordException.html">NotSslRecordException</a> e = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/handler/ssl/NotSslRecordException.html">NotSslRecordException</a>(
<a class="jxr_linenumber" name="858" href="#858">858</a>                     <span class="jxr_string">"not an SSL/TLS record: "</span> + ChannelBuffers.hexDump(in));
<a class="jxr_linenumber" name="859" href="#859">859</a>             in.skipBytes(in.readableBytes());
<a class="jxr_linenumber" name="860" href="#860">860</a>             <strong class="jxr_keyword">if</strong> (closeOnSslException) {
<a class="jxr_linenumber" name="861" href="#861">861</a>                 <em class="jxr_comment">// first trigger the exception and then close the channel</em>
<a class="jxr_linenumber" name="862" href="#862">862</a>                 fireExceptionCaught(ctx, e);
<a class="jxr_linenumber" name="863" href="#863">863</a>                 Channels.close(ctx, future(channel));
<a class="jxr_linenumber" name="864" href="#864">864</a> 
<a class="jxr_linenumber" name="865" href="#865">865</a>                 <em class="jxr_comment">// just return null as we closed the channel before, that</em>
<a class="jxr_linenumber" name="866" href="#866">866</a>                 <em class="jxr_comment">// will take care of cleanup etc</em>
<a class="jxr_linenumber" name="867" href="#867">867</a>                 <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="868" href="#868">868</a>             } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="869" href="#869">869</a>                 <strong class="jxr_keyword">throw</strong> e;
<a class="jxr_linenumber" name="870" href="#870">870</a>             }
<a class="jxr_linenumber" name="871" href="#871">871</a>         }
<a class="jxr_linenumber" name="872" href="#872">872</a> 
<a class="jxr_linenumber" name="873" href="#873">873</a>         <strong class="jxr_keyword">return</strong> unwrapped;
<a class="jxr_linenumber" name="874" href="#874">874</a>     }
<a class="jxr_linenumber" name="875" href="#875">875</a> 
<a class="jxr_linenumber" name="876" href="#876">876</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="877" href="#877">877</a> <em class="jxr_javadoccomment">     * Reads a big-endian short integer from the buffer.  Please note that we do not use</em>
<a class="jxr_linenumber" name="878" href="#878">878</a> <em class="jxr_javadoccomment">     * {@link ChannelBuffer#getShort(int)} because it might be a little-endian buffer.</em>
<a class="jxr_linenumber" name="879" href="#879">879</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="880" href="#880">880</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">short</strong> getShort(<a href="../../../../../org/jboss/netty/buffer/ChannelBuffer.html">ChannelBuffer</a> buf, <strong class="jxr_keyword">int</strong> offset) {
<a class="jxr_linenumber" name="881" href="#881">881</a>         <strong class="jxr_keyword">return</strong> (<strong class="jxr_keyword">short</strong>) (buf.getByte(offset) &lt;&lt; 8 | buf.getByte(offset + 1) &amp; 0xFF);
<a class="jxr_linenumber" name="882" href="#882">882</a>     }
<a class="jxr_linenumber" name="883" href="#883">883</a> 
<a class="jxr_linenumber" name="884" href="#884">884</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> wrap(<a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> context, <a href="../../../../../org/jboss/netty/channel/Channel.html">Channel</a> channel) <strong class="jxr_keyword">throws</strong> SSLException {
<a class="jxr_linenumber" name="885" href="#885">885</a>         <a href="../../../../../org/jboss/netty/buffer/ChannelBuffer.html">ChannelBuffer</a> msg;
<a class="jxr_linenumber" name="886" href="#886">886</a>         ByteBuffer outNetBuf = bufferPool.acquireBuffer();
<a class="jxr_linenumber" name="887" href="#887">887</a>         <strong class="jxr_keyword">boolean</strong> success = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="888" href="#888">888</a>         <strong class="jxr_keyword">boolean</strong> offered = false;
<a class="jxr_linenumber" name="889" href="#889">889</a>         <strong class="jxr_keyword">boolean</strong> needsUnwrap = false;
<a class="jxr_linenumber" name="890" href="#890">890</a>         <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">PendingWrite</a> pendingWrite = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="891" href="#891">891</a> 
<a class="jxr_linenumber" name="892" href="#892">892</a>         <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="893" href="#893">893</a>             loop:
<a class="jxr_linenumber" name="894" href="#894">894</a>             <strong class="jxr_keyword">for</strong> (;;) {
<a class="jxr_linenumber" name="895" href="#895">895</a>                 <em class="jxr_comment">// Acquire a lock to make sure unencrypted data is polled</em>
<a class="jxr_linenumber" name="896" href="#896">896</a>                 <em class="jxr_comment">// in order and their encrypted counterpart is offered in</em>
<a class="jxr_linenumber" name="897" href="#897">897</a>                 <em class="jxr_comment">// order.</em>
<a class="jxr_linenumber" name="898" href="#898">898</a>                 pendingUnencryptedWritesLock.lock();
<a class="jxr_linenumber" name="899" href="#899">899</a>                 <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="900" href="#900">900</a>                     pendingWrite = pendingUnencryptedWrites.peek();
<a class="jxr_linenumber" name="901" href="#901">901</a>                     <strong class="jxr_keyword">if</strong> (pendingWrite == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="902" href="#902">902</a>                         <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="903" href="#903">903</a>                     }
<a class="jxr_linenumber" name="904" href="#904">904</a> 
<a class="jxr_linenumber" name="905" href="#905">905</a>                     ByteBuffer outAppBuf = pendingWrite.outAppBuf;
<a class="jxr_linenumber" name="906" href="#906">906</a>                     <strong class="jxr_keyword">if</strong> (outAppBuf == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="907" href="#907">907</a>                         <em class="jxr_comment">// A write request with an empty buffer</em>
<a class="jxr_linenumber" name="908" href="#908">908</a>                         pendingUnencryptedWrites.remove();
<a class="jxr_linenumber" name="909" href="#909">909</a>                         offerEncryptedWriteRequest(
<a class="jxr_linenumber" name="910" href="#910">910</a>                                 <strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/channel/DownstreamMessageEvent.html">DownstreamMessageEvent</a>(
<a class="jxr_linenumber" name="911" href="#911">911</a>                                         channel, pendingWrite.future,
<a class="jxr_linenumber" name="912" href="#912">912</a>                                         ChannelBuffers.EMPTY_BUFFER,
<a class="jxr_linenumber" name="913" href="#913">913</a>                                         channel.getRemoteAddress()));
<a class="jxr_linenumber" name="914" href="#914">914</a>                         offered = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="915" href="#915">915</a>                     } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="916" href="#916">916</a>                         <strong class="jxr_keyword">synchronized</strong> (handshakeLock) {
<a class="jxr_linenumber" name="917" href="#917">917</a>                             SSLEngineResult result = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="918" href="#918">918</a>                             <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="919" href="#919">919</a>                                 result = engine.wrap(outAppBuf, outNetBuf);
<a class="jxr_linenumber" name="920" href="#920">920</a>                             } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="921" href="#921">921</a>                                 <strong class="jxr_keyword">if</strong> (!outAppBuf.hasRemaining()) {
<a class="jxr_linenumber" name="922" href="#922">922</a>                                     pendingUnencryptedWrites.remove();
<a class="jxr_linenumber" name="923" href="#923">923</a>                                 }
<a class="jxr_linenumber" name="924" href="#924">924</a>                             }
<a class="jxr_linenumber" name="925" href="#925">925</a> 
<a class="jxr_linenumber" name="926" href="#926">926</a>                             <strong class="jxr_keyword">if</strong> (result.bytesProduced() &gt; 0) {
<a class="jxr_linenumber" name="927" href="#927">927</a>                                 outNetBuf.flip();
<a class="jxr_linenumber" name="928" href="#928">928</a>                                 <strong class="jxr_keyword">int</strong> remaining = outNetBuf.remaining();
<a class="jxr_linenumber" name="929" href="#929">929</a>                                 msg = ctx.getChannel().getConfig().getBufferFactory().getBuffer(remaining);
<a class="jxr_linenumber" name="930" href="#930">930</a> 
<a class="jxr_linenumber" name="931" href="#931">931</a>                                 <em class="jxr_comment">// Transfer the bytes to the new ChannelBuffer using some safe method that will also</em>
<a class="jxr_linenumber" name="932" href="#932">932</a>                                 <em class="jxr_comment">// work with "non" heap buffers</em>
<a class="jxr_linenumber" name="933" href="#933">933</a>                                 <em class="jxr_comment">//</em>
<a class="jxr_linenumber" name="934" href="#934">934</a>                                 <em class="jxr_comment">// See https://github.com/netty/netty/issues/329</em>
<a class="jxr_linenumber" name="935" href="#935">935</a>                                 msg.writeBytes(outNetBuf);
<a class="jxr_linenumber" name="936" href="#936">936</a>                                 outNetBuf.clear();
<a class="jxr_linenumber" name="937" href="#937">937</a> 
<a class="jxr_linenumber" name="938" href="#938">938</a>                                 <a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> future;
<a class="jxr_linenumber" name="939" href="#939">939</a>                                 <strong class="jxr_keyword">if</strong> (pendingWrite.outAppBuf.hasRemaining()) {
<a class="jxr_linenumber" name="940" href="#940">940</a>                                     <em class="jxr_comment">// pendingWrite's future shouldn't be notified if</em>
<a class="jxr_linenumber" name="941" href="#941">941</a>                                     <em class="jxr_comment">// only partial data is written.</em>
<a class="jxr_linenumber" name="942" href="#942">942</a>                                     future = succeededFuture(channel);
<a class="jxr_linenumber" name="943" href="#943">943</a>                                 } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="944" href="#944">944</a>                                     future = pendingWrite.future;
<a class="jxr_linenumber" name="945" href="#945">945</a>                                 }
<a class="jxr_linenumber" name="946" href="#946">946</a> 
<a class="jxr_linenumber" name="947" href="#947">947</a>                                 <a href="../../../../../org/jboss/netty/channel/MessageEvent.html">MessageEvent</a> encryptedWrite = <strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/channel/DownstreamMessageEvent.html">DownstreamMessageEvent</a>(
<a class="jxr_linenumber" name="948" href="#948">948</a>                                         channel, future, msg, channel.getRemoteAddress());
<a class="jxr_linenumber" name="949" href="#949">949</a>                                 offerEncryptedWriteRequest(encryptedWrite);
<a class="jxr_linenumber" name="950" href="#950">950</a>                                 offered = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="951" href="#951">951</a>                             } <strong class="jxr_keyword">else</strong> <strong class="jxr_keyword">if</strong> (result.getStatus() == Status.CLOSED) {
<a class="jxr_linenumber" name="952" href="#952">952</a>                                 <em class="jxr_comment">// SSLEngine has been closed already.</em>
<a class="jxr_linenumber" name="953" href="#953">953</a>                                 <em class="jxr_comment">// Any further write attempts should be denied.</em>
<a class="jxr_linenumber" name="954" href="#954">954</a>                                 success = false;
<a class="jxr_linenumber" name="955" href="#955">955</a>                                 <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="956" href="#956">956</a>                             } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="957" href="#957">957</a>                                 <strong class="jxr_keyword">final</strong> HandshakeStatus handshakeStatus = result.getHandshakeStatus();
<a class="jxr_linenumber" name="958" href="#958">958</a>                                 handleRenegotiation(handshakeStatus);
<a class="jxr_linenumber" name="959" href="#959">959</a>                                 <strong class="jxr_keyword">switch</strong> (handshakeStatus) {
<a class="jxr_linenumber" name="960" href="#960">960</a>                                 <strong class="jxr_keyword">case</strong> NEED_WRAP:
<a class="jxr_linenumber" name="961" href="#961">961</a>                                     <strong class="jxr_keyword">if</strong> (outAppBuf.hasRemaining()) {
<a class="jxr_linenumber" name="962" href="#962">962</a>                                         <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="963" href="#963">963</a>                                     } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="964" href="#964">964</a>                                         <strong class="jxr_keyword">break</strong> loop;
<a class="jxr_linenumber" name="965" href="#965">965</a>                                     }
<a class="jxr_linenumber" name="966" href="#966">966</a>                                 <strong class="jxr_keyword">case</strong> NEED_UNWRAP:
<a class="jxr_linenumber" name="967" href="#967">967</a>                                     needsUnwrap = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="968" href="#968">968</a>                                     <strong class="jxr_keyword">break</strong> loop;
<a class="jxr_linenumber" name="969" href="#969">969</a>                                 <strong class="jxr_keyword">case</strong> NEED_TASK:
<a class="jxr_linenumber" name="970" href="#970">970</a>                                     runDelegatedTasks();
<a class="jxr_linenumber" name="971" href="#971">971</a>                                     <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="972" href="#972">972</a>                                 <strong class="jxr_keyword">case</strong> FINISHED:
<a class="jxr_linenumber" name="973" href="#973">973</a>                                     setHandshakeSuccess(channel);
<a class="jxr_linenumber" name="974" href="#974">974</a>                                     <strong class="jxr_keyword">if</strong> (result.getStatus() == Status.CLOSED) {
<a class="jxr_linenumber" name="975" href="#975">975</a>                                         success = false;
<a class="jxr_linenumber" name="976" href="#976">976</a>                                     }
<a class="jxr_linenumber" name="977" href="#977">977</a>                                     <strong class="jxr_keyword">break</strong> loop;
<a class="jxr_linenumber" name="978" href="#978">978</a>                                 <strong class="jxr_keyword">case</strong> NOT_HANDSHAKING:
<a class="jxr_linenumber" name="979" href="#979">979</a>                                     setHandshakeSuccessIfStillHandshaking(channel);
<a class="jxr_linenumber" name="980" href="#980">980</a>                                     <strong class="jxr_keyword">if</strong> (result.getStatus() == Status.CLOSED) {
<a class="jxr_linenumber" name="981" href="#981">981</a>                                         success = false;
<a class="jxr_linenumber" name="982" href="#982">982</a>                                     }
<a class="jxr_linenumber" name="983" href="#983">983</a>                                     <strong class="jxr_keyword">break</strong> loop;
<a class="jxr_linenumber" name="984" href="#984">984</a>                                 <strong class="jxr_keyword">default</strong>:
<a class="jxr_linenumber" name="985" href="#985">985</a>                                     <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> IllegalStateException(
<a class="jxr_linenumber" name="986" href="#986">986</a>                                             <span class="jxr_string">"Unknown handshake status: "</span> +
<a class="jxr_linenumber" name="987" href="#987">987</a>                                             handshakeStatus);
<a class="jxr_linenumber" name="988" href="#988">988</a>                                 }
<a class="jxr_linenumber" name="989" href="#989">989</a>                             }
<a class="jxr_linenumber" name="990" href="#990">990</a>                         }
<a class="jxr_linenumber" name="991" href="#991">991</a>                     }
<a class="jxr_linenumber" name="992" href="#992">992</a>                 } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="993" href="#993">993</a>                     pendingUnencryptedWritesLock.unlock();
<a class="jxr_linenumber" name="994" href="#994">994</a>                 }
<a class="jxr_linenumber" name="995" href="#995">995</a>             }
<a class="jxr_linenumber" name="996" href="#996">996</a>         } <strong class="jxr_keyword">catch</strong> (SSLException e) {
<a class="jxr_linenumber" name="997" href="#997">997</a>             success = false;
<a class="jxr_linenumber" name="998" href="#998">998</a>             setHandshakeFailure(channel, e);
<a class="jxr_linenumber" name="999" href="#999">999</a>             <strong class="jxr_keyword">throw</strong> e;
<a class="jxr_linenumber" name="1000" href="#1000">1000</a>         } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="1001" href="#1001">1001</a>             bufferPool.releaseBuffer(outNetBuf);
<a class="jxr_linenumber" name="1002" href="#1002">1002</a> 
<a class="jxr_linenumber" name="1003" href="#1003">1003</a>             <strong class="jxr_keyword">if</strong> (offered) {
<a class="jxr_linenumber" name="1004" href="#1004">1004</a>                 flushPendingEncryptedWrites(context);
<a class="jxr_linenumber" name="1005" href="#1005">1005</a>             }
<a class="jxr_linenumber" name="1006" href="#1006">1006</a> 
<a class="jxr_linenumber" name="1007" href="#1007">1007</a>             <strong class="jxr_keyword">if</strong> (!success) {
<a class="jxr_linenumber" name="1008" href="#1008">1008</a>                 Exception cause = channel.isOpen()
<a class="jxr_linenumber" name="1009" href="#1009">1009</a>                         ? <strong class="jxr_keyword">new</strong> SSLException(<span class="jxr_string">"SSLEngine already closed"</span>)
<a class="jxr_linenumber" name="1010" href="#1010">1010</a>                         : <strong class="jxr_keyword">new</strong> ClosedChannelException();
<a class="jxr_linenumber" name="1011" href="#1011">1011</a> 
<a class="jxr_linenumber" name="1012" href="#1012">1012</a>                 <em class="jxr_comment">// Check if we had a pendingWrite in process, if so we need to also notify as otherwise</em>
<a class="jxr_linenumber" name="1013" href="#1013">1013</a>                 <em class="jxr_comment">// the ChannelFuture will never get notified</em>
<a class="jxr_linenumber" name="1014" href="#1014">1014</a>                 <strong class="jxr_keyword">if</strong> (pendingWrite != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1015" href="#1015">1015</a>                     pendingWrite.future.setFailure(cause);
<a class="jxr_linenumber" name="1016" href="#1016">1016</a>                 }
<a class="jxr_linenumber" name="1017" href="#1017">1017</a> 
<a class="jxr_linenumber" name="1018" href="#1018">1018</a>                 <em class="jxr_comment">// Mark all remaining pending writes as failure if anything</em>
<a class="jxr_linenumber" name="1019" href="#1019">1019</a>                 <em class="jxr_comment">// wrong happened before the write requests are wrapped.</em>
<a class="jxr_linenumber" name="1020" href="#1020">1020</a>                 <em class="jxr_comment">// Please note that we do not call setFailure while a lock is</em>
<a class="jxr_linenumber" name="1021" href="#1021">1021</a>                 <em class="jxr_comment">// acquired, to avoid a potential dead lock.</em>
<a class="jxr_linenumber" name="1022" href="#1022">1022</a>                 <strong class="jxr_keyword">for</strong> (;;) {
<a class="jxr_linenumber" name="1023" href="#1023">1023</a>                     pendingUnencryptedWritesLock.lock();
<a class="jxr_linenumber" name="1024" href="#1024">1024</a>                     <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="1025" href="#1025">1025</a>                         pendingWrite = pendingUnencryptedWrites.poll();
<a class="jxr_linenumber" name="1026" href="#1026">1026</a>                         <strong class="jxr_keyword">if</strong> (pendingWrite == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1027" href="#1027">1027</a>                             <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1028" href="#1028">1028</a>                         }
<a class="jxr_linenumber" name="1029" href="#1029">1029</a>                     } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="1030" href="#1030">1030</a>                         pendingUnencryptedWritesLock.unlock();
<a class="jxr_linenumber" name="1031" href="#1031">1031</a>                     }
<a class="jxr_linenumber" name="1032" href="#1032">1032</a> 
<a class="jxr_linenumber" name="1033" href="#1033">1033</a>                     pendingWrite.future.setFailure(cause);
<a class="jxr_linenumber" name="1034" href="#1034">1034</a>                 }
<a class="jxr_linenumber" name="1035" href="#1035">1035</a>             }
<a class="jxr_linenumber" name="1036" href="#1036">1036</a>         }
<a class="jxr_linenumber" name="1037" href="#1037">1037</a> 
<a class="jxr_linenumber" name="1038" href="#1038">1038</a>         <strong class="jxr_keyword">if</strong> (needsUnwrap) {
<a class="jxr_linenumber" name="1039" href="#1039">1039</a>             unwrapNonAppData(ctx, channel, <strong class="jxr_keyword">true</strong>);
<a class="jxr_linenumber" name="1040" href="#1040">1040</a>         }
<a class="jxr_linenumber" name="1041" href="#1041">1041</a>     }
<a class="jxr_linenumber" name="1042" href="#1042">1042</a> 
<a class="jxr_linenumber" name="1043" href="#1043">1043</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> offerEncryptedWriteRequest(<a href="../../../../../org/jboss/netty/channel/MessageEvent.html">MessageEvent</a> encryptedWrite) {
<a class="jxr_linenumber" name="1044" href="#1044">1044</a>         <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">boolean</strong> locked = pendingEncryptedWritesLock.tryLock();
<a class="jxr_linenumber" name="1045" href="#1045">1045</a>         <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="1046" href="#1046">1046</a>             pendingEncryptedWrites.add(encryptedWrite);
<a class="jxr_linenumber" name="1047" href="#1047">1047</a>         } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="1048" href="#1048">1048</a>             <strong class="jxr_keyword">if</strong> (locked) {
<a class="jxr_linenumber" name="1049" href="#1049">1049</a>                 pendingEncryptedWritesLock.unlock();
<a class="jxr_linenumber" name="1050" href="#1050">1050</a>             }
<a class="jxr_linenumber" name="1051" href="#1051">1051</a>         }
<a class="jxr_linenumber" name="1052" href="#1052">1052</a>     }
<a class="jxr_linenumber" name="1053" href="#1053">1053</a> 
<a class="jxr_linenumber" name="1054" href="#1054">1054</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> flushPendingEncryptedWrites(<a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx) {
<a class="jxr_linenumber" name="1055" href="#1055">1055</a>         <strong class="jxr_keyword">while</strong> (!pendingEncryptedWrites.isEmpty()) {
<a class="jxr_linenumber" name="1056" href="#1056">1056</a>             <em class="jxr_comment">// Avoid possible dead lock and data integrity issue</em>
<a class="jxr_linenumber" name="1057" href="#1057">1057</a>             <em class="jxr_comment">// which is caused by cross communication between more than one channel</em>
<a class="jxr_linenumber" name="1058" href="#1058">1058</a>             <em class="jxr_comment">// in the same VM.</em>
<a class="jxr_linenumber" name="1059" href="#1059">1059</a>             <strong class="jxr_keyword">if</strong> (!pendingEncryptedWritesLock.tryLock()) {
<a class="jxr_linenumber" name="1060" href="#1060">1060</a>                 <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="1061" href="#1061">1061</a>             }
<a class="jxr_linenumber" name="1062" href="#1062">1062</a> 
<a class="jxr_linenumber" name="1063" href="#1063">1063</a>             <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="1064" href="#1064">1064</a>                 <a href="../../../../../org/jboss/netty/channel/MessageEvent.html">MessageEvent</a> e;
<a class="jxr_linenumber" name="1065" href="#1065">1065</a>                 <strong class="jxr_keyword">while</strong> ((e = pendingEncryptedWrites.poll()) != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1066" href="#1066">1066</a>                     ctx.sendDownstream(e);
<a class="jxr_linenumber" name="1067" href="#1067">1067</a>                 }
<a class="jxr_linenumber" name="1068" href="#1068">1068</a>             } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="1069" href="#1069">1069</a>                 pendingEncryptedWritesLock.unlock();
<a class="jxr_linenumber" name="1070" href="#1070">1070</a>             }
<a class="jxr_linenumber" name="1071" href="#1071">1071</a> 
<a class="jxr_linenumber" name="1072" href="#1072">1072</a>             <em class="jxr_comment">// Other thread might have added more elements at this point, so we loop again if the queue got unempty.</em>
<a class="jxr_linenumber" name="1073" href="#1073">1073</a>         }
<a class="jxr_linenumber" name="1074" href="#1074">1074</a>     }
<a class="jxr_linenumber" name="1075" href="#1075">1075</a> 
<a class="jxr_linenumber" name="1076" href="#1076">1076</a>     <strong class="jxr_keyword">private</strong> <a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> wrapNonAppData(<a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx, <a href="../../../../../org/jboss/netty/channel/Channel.html">Channel</a> channel) <strong class="jxr_keyword">throws</strong> SSLException {
<a class="jxr_linenumber" name="1077" href="#1077">1077</a>         <a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> future = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="1078" href="#1078">1078</a>         ByteBuffer outNetBuf = bufferPool.acquireBuffer();
<a class="jxr_linenumber" name="1079" href="#1079">1079</a> 
<a class="jxr_linenumber" name="1080" href="#1080">1080</a>         SSLEngineResult result;
<a class="jxr_linenumber" name="1081" href="#1081">1081</a>         <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="1082" href="#1082">1082</a>             <strong class="jxr_keyword">for</strong> (;;) {
<a class="jxr_linenumber" name="1083" href="#1083">1083</a>                 <strong class="jxr_keyword">synchronized</strong> (handshakeLock) {
<a class="jxr_linenumber" name="1084" href="#1084">1084</a>                     result = engine.wrap(EMPTY_BUFFER, outNetBuf);
<a class="jxr_linenumber" name="1085" href="#1085">1085</a>                 }
<a class="jxr_linenumber" name="1086" href="#1086">1086</a> 
<a class="jxr_linenumber" name="1087" href="#1087">1087</a>                 <strong class="jxr_keyword">if</strong> (result.bytesProduced() &gt; 0) {
<a class="jxr_linenumber" name="1088" href="#1088">1088</a>                     outNetBuf.flip();
<a class="jxr_linenumber" name="1089" href="#1089">1089</a>                     <a href="../../../../../org/jboss/netty/buffer/ChannelBuffer.html">ChannelBuffer</a> msg =
<a class="jxr_linenumber" name="1090" href="#1090">1090</a>                             ctx.getChannel().getConfig().getBufferFactory().getBuffer(outNetBuf.remaining());
<a class="jxr_linenumber" name="1091" href="#1091">1091</a> 
<a class="jxr_linenumber" name="1092" href="#1092">1092</a>                     <em class="jxr_comment">// Transfer the bytes to the new ChannelBuffer using some safe method that will also</em>
<a class="jxr_linenumber" name="1093" href="#1093">1093</a>                     <em class="jxr_comment">// work with "non" heap buffers</em>
<a class="jxr_linenumber" name="1094" href="#1094">1094</a>                     <em class="jxr_comment">//</em>
<a class="jxr_linenumber" name="1095" href="#1095">1095</a>                     <em class="jxr_comment">// See https://github.com/netty/netty/issues/329</em>
<a class="jxr_linenumber" name="1096" href="#1096">1096</a>                     msg.writeBytes(outNetBuf);
<a class="jxr_linenumber" name="1097" href="#1097">1097</a>                     outNetBuf.clear();
<a class="jxr_linenumber" name="1098" href="#1098">1098</a> 
<a class="jxr_linenumber" name="1099" href="#1099">1099</a>                     future = future(channel);
<a class="jxr_linenumber" name="1100" href="#1100">1100</a>                     future.addListener(<strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/channel/ChannelFutureListener.html">ChannelFutureListener</a>() {
<a class="jxr_linenumber" name="1101" href="#1101">1101</a>                         <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> operationComplete(<a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> future)
<a class="jxr_linenumber" name="1102" href="#1102">1102</a>                                 <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="1103" href="#1103">1103</a>                             <strong class="jxr_keyword">if</strong> (future.getCause() instanceof ClosedChannelException) {
<a class="jxr_linenumber" name="1104" href="#1104">1104</a>                                 <strong class="jxr_keyword">synchronized</strong> (ignoreClosedChannelExceptionLock) {
<a class="jxr_linenumber" name="1105" href="#1105">1105</a>                                     ignoreClosedChannelException ++;
<a class="jxr_linenumber" name="1106" href="#1106">1106</a>                                 }
<a class="jxr_linenumber" name="1107" href="#1107">1107</a>                             }
<a class="jxr_linenumber" name="1108" href="#1108">1108</a>                         }
<a class="jxr_linenumber" name="1109" href="#1109">1109</a>                     });
<a class="jxr_linenumber" name="1110" href="#1110">1110</a> 
<a class="jxr_linenumber" name="1111" href="#1111">1111</a>                     write(ctx, future, msg);
<a class="jxr_linenumber" name="1112" href="#1112">1112</a>                 }
<a class="jxr_linenumber" name="1113" href="#1113">1113</a> 
<a class="jxr_linenumber" name="1114" href="#1114">1114</a>                 <strong class="jxr_keyword">final</strong> HandshakeStatus handshakeStatus = result.getHandshakeStatus();
<a class="jxr_linenumber" name="1115" href="#1115">1115</a>                 handleRenegotiation(handshakeStatus);
<a class="jxr_linenumber" name="1116" href="#1116">1116</a>                 <strong class="jxr_keyword">switch</strong> (handshakeStatus) {
<a class="jxr_linenumber" name="1117" href="#1117">1117</a>                 <strong class="jxr_keyword">case</strong> FINISHED:
<a class="jxr_linenumber" name="1118" href="#1118">1118</a>                     setHandshakeSuccess(channel);
<a class="jxr_linenumber" name="1119" href="#1119">1119</a>                     runDelegatedTasks();
<a class="jxr_linenumber" name="1120" href="#1120">1120</a>                     <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1121" href="#1121">1121</a>                 <strong class="jxr_keyword">case</strong> NEED_TASK:
<a class="jxr_linenumber" name="1122" href="#1122">1122</a>                     runDelegatedTasks();
<a class="jxr_linenumber" name="1123" href="#1123">1123</a>                     <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1124" href="#1124">1124</a>                 <strong class="jxr_keyword">case</strong> NEED_UNWRAP:
<a class="jxr_linenumber" name="1125" href="#1125">1125</a>                     <strong class="jxr_keyword">if</strong> (!Thread.holdsLock(handshakeLock)) {
<a class="jxr_linenumber" name="1126" href="#1126">1126</a>                         <em class="jxr_comment">// unwrap shouldn't be called when this method was</em>
<a class="jxr_linenumber" name="1127" href="#1127">1127</a>                         <em class="jxr_comment">// called by unwrap - unwrap will keep running after</em>
<a class="jxr_linenumber" name="1128" href="#1128">1128</a>                         <em class="jxr_comment">// this method returns.</em>
<a class="jxr_linenumber" name="1129" href="#1129">1129</a>                         unwrapNonAppData(ctx, channel, <strong class="jxr_keyword">true</strong>);
<a class="jxr_linenumber" name="1130" href="#1130">1130</a>                     }
<a class="jxr_linenumber" name="1131" href="#1131">1131</a>                     <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1132" href="#1132">1132</a>                 <strong class="jxr_keyword">case</strong> NOT_HANDSHAKING:
<a class="jxr_linenumber" name="1133" href="#1133">1133</a>                     <strong class="jxr_keyword">if</strong> (setHandshakeSuccessIfStillHandshaking(channel)) {
<a class="jxr_linenumber" name="1134" href="#1134">1134</a>                         runDelegatedTasks();
<a class="jxr_linenumber" name="1135" href="#1135">1135</a>                     }
<a class="jxr_linenumber" name="1136" href="#1136">1136</a>                     <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1137" href="#1137">1137</a>                 <strong class="jxr_keyword">case</strong> NEED_WRAP:
<a class="jxr_linenumber" name="1138" href="#1138">1138</a>                     <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1139" href="#1139">1139</a>                 <strong class="jxr_keyword">default</strong>:
<a class="jxr_linenumber" name="1140" href="#1140">1140</a>                     <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> IllegalStateException(
<a class="jxr_linenumber" name="1141" href="#1141">1141</a>                             <span class="jxr_string">"Unexpected handshake status: "</span> + handshakeStatus);
<a class="jxr_linenumber" name="1142" href="#1142">1142</a>                 }
<a class="jxr_linenumber" name="1143" href="#1143">1143</a> 
<a class="jxr_linenumber" name="1144" href="#1144">1144</a>                 <strong class="jxr_keyword">if</strong> (result.bytesProduced() == 0) {
<a class="jxr_linenumber" name="1145" href="#1145">1145</a>                     <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1146" href="#1146">1146</a>                 }
<a class="jxr_linenumber" name="1147" href="#1147">1147</a>             }
<a class="jxr_linenumber" name="1148" href="#1148">1148</a>         } <strong class="jxr_keyword">catch</strong> (SSLException e) {
<a class="jxr_linenumber" name="1149" href="#1149">1149</a>             setHandshakeFailure(channel, e);
<a class="jxr_linenumber" name="1150" href="#1150">1150</a>             <strong class="jxr_keyword">throw</strong> e;
<a class="jxr_linenumber" name="1151" href="#1151">1151</a>         } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="1152" href="#1152">1152</a>             bufferPool.releaseBuffer(outNetBuf);
<a class="jxr_linenumber" name="1153" href="#1153">1153</a>         }
<a class="jxr_linenumber" name="1154" href="#1154">1154</a> 
<a class="jxr_linenumber" name="1155" href="#1155">1155</a>         <strong class="jxr_keyword">if</strong> (future == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1156" href="#1156">1156</a>             future = succeededFuture(channel);
<a class="jxr_linenumber" name="1157" href="#1157">1157</a>         }
<a class="jxr_linenumber" name="1158" href="#1158">1158</a> 
<a class="jxr_linenumber" name="1159" href="#1159">1159</a>         <strong class="jxr_keyword">return</strong> future;
<a class="jxr_linenumber" name="1160" href="#1160">1160</a>     }
<a class="jxr_linenumber" name="1161" href="#1161">1161</a> 
<a class="jxr_linenumber" name="1162" href="#1162">1162</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="1163" href="#1163">1163</a> <em class="jxr_javadoccomment">     * Calls {@link SSLEngine#unwrap(ByteBuffer, ByteBuffer)} with an empty buffer to handle handshakes, etc.</em>
<a class="jxr_linenumber" name="1164" href="#1164">1164</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="1165" href="#1165">1165</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> unwrapNonAppData(
<a class="jxr_linenumber" name="1166" href="#1166">1166</a>             <a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx, <a href="../../../../../org/jboss/netty/channel/Channel.html">Channel</a> channel, <strong class="jxr_keyword">boolean</strong> mightNeedHandshake) <strong class="jxr_keyword">throws</strong> SSLException {
<a class="jxr_linenumber" name="1167" href="#1167">1167</a>         unwrap(ctx, channel, EMPTY_BUFFER, -1, mightNeedHandshake);
<a class="jxr_linenumber" name="1168" href="#1168">1168</a>     }
<a class="jxr_linenumber" name="1169" href="#1169">1169</a> 
<a class="jxr_linenumber" name="1170" href="#1170">1170</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="1171" href="#1171">1171</a> <em class="jxr_javadoccomment">     * Unwraps inbound SSL records.</em>
<a class="jxr_linenumber" name="1172" href="#1172">1172</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="1173" href="#1173">1173</a>     <strong class="jxr_keyword">private</strong> <a href="../../../../../org/jboss/netty/buffer/ChannelBuffer.html">ChannelBuffer</a> unwrap(
<a class="jxr_linenumber" name="1174" href="#1174">1174</a>             <a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx, <a href="../../../../../org/jboss/netty/channel/Channel.html">Channel</a> channel,
<a class="jxr_linenumber" name="1175" href="#1175">1175</a>             ByteBuffer nioInNetBuf,
<a class="jxr_linenumber" name="1176" href="#1176">1176</a>             <strong class="jxr_keyword">int</strong> initialNettyOutAppBufCapacity, <strong class="jxr_keyword">boolean</strong> mightNeedHandshake) <strong class="jxr_keyword">throws</strong> SSLException {
<a class="jxr_linenumber" name="1177" href="#1177">1177</a> 
<a class="jxr_linenumber" name="1178" href="#1178">1178</a>         <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">int</strong> nioInNetBufStartOffset = nioInNetBuf.position();
<a class="jxr_linenumber" name="1179" href="#1179">1179</a>         <strong class="jxr_keyword">final</strong> ByteBuffer nioOutAppBuf = bufferPool.acquireBuffer();
<a class="jxr_linenumber" name="1180" href="#1180">1180</a> 
<a class="jxr_linenumber" name="1181" href="#1181">1181</a>         <a href="../../../../../org/jboss/netty/buffer/ChannelBuffer.html">ChannelBuffer</a> nettyOutAppBuf = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="1182" href="#1182">1182</a> 
<a class="jxr_linenumber" name="1183" href="#1183">1183</a>         <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="1184" href="#1184">1184</a>             <strong class="jxr_keyword">boolean</strong> needsWrap = false;
<a class="jxr_linenumber" name="1185" href="#1185">1185</a>             <strong class="jxr_keyword">for</strong> (;;) {
<a class="jxr_linenumber" name="1186" href="#1186">1186</a>                 SSLEngineResult result;
<a class="jxr_linenumber" name="1187" href="#1187">1187</a>                 <strong class="jxr_keyword">boolean</strong> needsHandshake = false;
<a class="jxr_linenumber" name="1188" href="#1188">1188</a>                 <strong class="jxr_keyword">if</strong> (mightNeedHandshake) {
<a class="jxr_linenumber" name="1189" href="#1189">1189</a>                     <strong class="jxr_keyword">synchronized</strong> (handshakeLock) {
<a class="jxr_linenumber" name="1190" href="#1190">1190</a>                         <strong class="jxr_keyword">if</strong> (!handshaken &amp;&amp; !handshaking &amp;&amp;
<a class="jxr_linenumber" name="1191" href="#1191">1191</a>                             !engine.getUseClientMode() &amp;&amp;
<a class="jxr_linenumber" name="1192" href="#1192">1192</a>                             !engine.isInboundDone() &amp;&amp; !engine.isOutboundDone()) {
<a class="jxr_linenumber" name="1193" href="#1193">1193</a>                             needsHandshake = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="1194" href="#1194">1194</a>                         }
<a class="jxr_linenumber" name="1195" href="#1195">1195</a>                     }
<a class="jxr_linenumber" name="1196" href="#1196">1196</a>                 }
<a class="jxr_linenumber" name="1197" href="#1197">1197</a> 
<a class="jxr_linenumber" name="1198" href="#1198">1198</a>                 <strong class="jxr_keyword">if</strong> (needsHandshake) {
<a class="jxr_linenumber" name="1199" href="#1199">1199</a>                     handshake();
<a class="jxr_linenumber" name="1200" href="#1200">1200</a>                 }
<a class="jxr_linenumber" name="1201" href="#1201">1201</a> 
<a class="jxr_linenumber" name="1202" href="#1202">1202</a>                 <strong class="jxr_keyword">synchronized</strong> (handshakeLock) {
<a class="jxr_linenumber" name="1203" href="#1203">1203</a>                     <em class="jxr_comment">// Decrypt at least one record in the inbound network buffer.</em>
<a class="jxr_linenumber" name="1204" href="#1204">1204</a>                     <em class="jxr_comment">// It is impossible to consume no record here because we made sure the inbound network buffer</em>
<a class="jxr_linenumber" name="1205" href="#1205">1205</a>                     <em class="jxr_comment">// always contain at least one record in decode().  Therefore, if SSLEngine.unwrap() returns</em>
<a class="jxr_linenumber" name="1206" href="#1206">1206</a>                     <em class="jxr_comment">// BUFFER_OVERFLOW, it is always resolved by retrying after emptying the application buffer.</em>
<a class="jxr_linenumber" name="1207" href="#1207">1207</a>                     <strong class="jxr_keyword">for</strong> (;;) {
<a class="jxr_linenumber" name="1208" href="#1208">1208</a>                         <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">int</strong> outAppBufSize = engine.getSession().getApplicationBufferSize();
<a class="jxr_linenumber" name="1209" href="#1209">1209</a>                         <strong class="jxr_keyword">final</strong> ByteBuffer outAppBuf;
<a class="jxr_linenumber" name="1210" href="#1210">1210</a>                         <strong class="jxr_keyword">if</strong> (nioOutAppBuf.capacity() &lt; outAppBufSize) {
<a class="jxr_linenumber" name="1211" href="#1211">1211</a>                             <em class="jxr_comment">// SSLEngine wants a buffer larger than what the pool can provide.</em>
<a class="jxr_linenumber" name="1212" href="#1212">1212</a>                             <em class="jxr_comment">// Allocate a temporary heap buffer.</em>
<a class="jxr_linenumber" name="1213" href="#1213">1213</a>                             outAppBuf = ByteBuffer.allocate(outAppBufSize);
<a class="jxr_linenumber" name="1214" href="#1214">1214</a>                         } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="1215" href="#1215">1215</a>                             outAppBuf = nioOutAppBuf;
<a class="jxr_linenumber" name="1216" href="#1216">1216</a>                         }
<a class="jxr_linenumber" name="1217" href="#1217">1217</a> 
<a class="jxr_linenumber" name="1218" href="#1218">1218</a>                         <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="1219" href="#1219">1219</a>                             result = engine.unwrap(nioInNetBuf, outAppBuf);
<a class="jxr_linenumber" name="1220" href="#1220">1220</a>                             <strong class="jxr_keyword">switch</strong> (result.getStatus()) {
<a class="jxr_linenumber" name="1221" href="#1221">1221</a>                                 <strong class="jxr_keyword">case</strong> CLOSED:
<a class="jxr_linenumber" name="1222" href="#1222">1222</a>                                     <em class="jxr_comment">// notify about the CLOSED state of the SSLEngine. See #137</em>
<a class="jxr_linenumber" name="1223" href="#1223">1223</a>                                     sslEngineCloseFuture.setClosed();
<a class="jxr_linenumber" name="1224" href="#1224">1224</a>                                     <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1225" href="#1225">1225</a>                                 <strong class="jxr_keyword">case</strong> BUFFER_OVERFLOW:
<a class="jxr_linenumber" name="1226" href="#1226">1226</a>                                     <em class="jxr_comment">// Flush the unwrapped data in the outAppBuf into frame and try again.</em>
<a class="jxr_linenumber" name="1227" href="#1227">1227</a>                                     <em class="jxr_comment">// See the finally block.</em>
<a class="jxr_linenumber" name="1228" href="#1228">1228</a>                                     <strong class="jxr_keyword">continue</strong>;
<a class="jxr_linenumber" name="1229" href="#1229">1229</a>                             }
<a class="jxr_linenumber" name="1230" href="#1230">1230</a> 
<a class="jxr_linenumber" name="1231" href="#1231">1231</a>                             <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1232" href="#1232">1232</a>                         } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="1233" href="#1233">1233</a>                             outAppBuf.flip();
<a class="jxr_linenumber" name="1234" href="#1234">1234</a> 
<a class="jxr_linenumber" name="1235" href="#1235">1235</a>                             <em class="jxr_comment">// Copy the unwrapped data into a smaller buffer.</em>
<a class="jxr_linenumber" name="1236" href="#1236">1236</a>                             <strong class="jxr_keyword">if</strong> (outAppBuf.hasRemaining()) {
<a class="jxr_linenumber" name="1237" href="#1237">1237</a>                                 <strong class="jxr_keyword">if</strong> (nettyOutAppBuf == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1238" href="#1238">1238</a>                                     <a href="../../../../../org/jboss/netty/buffer/ChannelBufferFactory.html">ChannelBufferFactory</a> factory = ctx.getChannel().getConfig().getBufferFactory();
<a class="jxr_linenumber" name="1239" href="#1239">1239</a>                                     nettyOutAppBuf = factory.getBuffer(initialNettyOutAppBufCapacity);
<a class="jxr_linenumber" name="1240" href="#1240">1240</a>                                 }
<a class="jxr_linenumber" name="1241" href="#1241">1241</a>                                 nettyOutAppBuf.writeBytes(outAppBuf);
<a class="jxr_linenumber" name="1242" href="#1242">1242</a>                             }
<a class="jxr_linenumber" name="1243" href="#1243">1243</a>                             outAppBuf.clear();
<a class="jxr_linenumber" name="1244" href="#1244">1244</a>                         }
<a class="jxr_linenumber" name="1245" href="#1245">1245</a>                     }
<a class="jxr_linenumber" name="1246" href="#1246">1246</a> 
<a class="jxr_linenumber" name="1247" href="#1247">1247</a>                     <strong class="jxr_keyword">final</strong> HandshakeStatus handshakeStatus = result.getHandshakeStatus();
<a class="jxr_linenumber" name="1248" href="#1248">1248</a>                     handleRenegotiation(handshakeStatus);
<a class="jxr_linenumber" name="1249" href="#1249">1249</a>                     <strong class="jxr_keyword">switch</strong> (handshakeStatus) {
<a class="jxr_linenumber" name="1250" href="#1250">1250</a>                     <strong class="jxr_keyword">case</strong> NEED_UNWRAP:
<a class="jxr_linenumber" name="1251" href="#1251">1251</a>                         <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1252" href="#1252">1252</a>                     <strong class="jxr_keyword">case</strong> NEED_WRAP:
<a class="jxr_linenumber" name="1253" href="#1253">1253</a>                         wrapNonAppData(ctx, channel);
<a class="jxr_linenumber" name="1254" href="#1254">1254</a>                         <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1255" href="#1255">1255</a>                     <strong class="jxr_keyword">case</strong> NEED_TASK:
<a class="jxr_linenumber" name="1256" href="#1256">1256</a>                         runDelegatedTasks();
<a class="jxr_linenumber" name="1257" href="#1257">1257</a>                         <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1258" href="#1258">1258</a>                     <strong class="jxr_keyword">case</strong> FINISHED:
<a class="jxr_linenumber" name="1259" href="#1259">1259</a>                         setHandshakeSuccess(channel);
<a class="jxr_linenumber" name="1260" href="#1260">1260</a>                         needsWrap = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="1261" href="#1261">1261</a>                         <strong class="jxr_keyword">continue</strong>;
<a class="jxr_linenumber" name="1262" href="#1262">1262</a>                     <strong class="jxr_keyword">case</strong> NOT_HANDSHAKING:
<a class="jxr_linenumber" name="1263" href="#1263">1263</a>                         <strong class="jxr_keyword">if</strong> (setHandshakeSuccessIfStillHandshaking(channel)) {
<a class="jxr_linenumber" name="1264" href="#1264">1264</a>                             needsWrap = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="1265" href="#1265">1265</a>                             <strong class="jxr_keyword">continue</strong>;
<a class="jxr_linenumber" name="1266" href="#1266">1266</a>                         }
<a class="jxr_linenumber" name="1267" href="#1267">1267</a>                         <strong class="jxr_keyword">if</strong> (writeBeforeHandshakeDone) {
<a class="jxr_linenumber" name="1268" href="#1268">1268</a>                             <em class="jxr_comment">// We need to call wrap(...) in case there was a flush done before the handshake completed.</em>
<a class="jxr_linenumber" name="1269" href="#1269">1269</a>                             <em class="jxr_comment">//</em>
<a class="jxr_linenumber" name="1270" href="#1270">1270</a>                             <em class="jxr_comment">// See https://github.com/netty/netty/pull/2437</em>
<a class="jxr_linenumber" name="1271" href="#1271">1271</a>                             writeBeforeHandshakeDone = false;
<a class="jxr_linenumber" name="1272" href="#1272">1272</a>                             needsWrap = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="1273" href="#1273">1273</a>                         }
<a class="jxr_linenumber" name="1274" href="#1274">1274</a>                         <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1275" href="#1275">1275</a>                     <strong class="jxr_keyword">default</strong>:
<a class="jxr_linenumber" name="1276" href="#1276">1276</a>                         <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> IllegalStateException(
<a class="jxr_linenumber" name="1277" href="#1277">1277</a>                                 <span class="jxr_string">"Unknown handshake status: "</span> + handshakeStatus);
<a class="jxr_linenumber" name="1278" href="#1278">1278</a>                     }
<a class="jxr_linenumber" name="1279" href="#1279">1279</a> 
<a class="jxr_linenumber" name="1280" href="#1280">1280</a>                     <strong class="jxr_keyword">if</strong> (result.getStatus() == Status.BUFFER_UNDERFLOW ||
<a class="jxr_linenumber" name="1281" href="#1281">1281</a>                         result.bytesConsumed() == 0 &amp;&amp; result.bytesProduced() == 0) {
<a class="jxr_linenumber" name="1282" href="#1282">1282</a>                         <strong class="jxr_keyword">if</strong> (nioInNetBuf.hasRemaining() &amp;&amp; !engine.isInboundDone()) {
<a class="jxr_linenumber" name="1283" href="#1283">1283</a>                             <em class="jxr_comment">// We expect SSLEngine to consume all the bytes we feed it, but</em>
<a class="jxr_linenumber" name="1284" href="#1284">1284</a>                             <em class="jxr_comment">// empirical evidence indicates that we sometimes end up with leftovers</em>
<a class="jxr_linenumber" name="1285" href="#1285">1285</a>                             <em class="jxr_comment">// Log when this happens to get a better understanding of this corner</em>
<a class="jxr_linenumber" name="1286" href="#1286">1286</a>                             <em class="jxr_comment">// case.</em>
<a class="jxr_linenumber" name="1287" href="#1287">1287</a>                             <em class="jxr_comment">// See https://github.com/netty/netty/pull/3584</em>
<a class="jxr_linenumber" name="1288" href="#1288">1288</a>                             logger.warn(<span class="jxr_string">"Unexpected leftover data after SSLEngine.unwrap():"</span>
<a class="jxr_linenumber" name="1289" href="#1289">1289</a>                                     + <span class="jxr_string">" status="</span> + result.getStatus()
<a class="jxr_linenumber" name="1290" href="#1290">1290</a>                                     + <span class="jxr_string">" handshakeStatus="</span> + result.getHandshakeStatus()
<a class="jxr_linenumber" name="1291" href="#1291">1291</a>                                     + <span class="jxr_string">" consumed="</span> + result.bytesConsumed()
<a class="jxr_linenumber" name="1292" href="#1292">1292</a>                                     + <span class="jxr_string">" produced="</span> + result.bytesProduced()
<a class="jxr_linenumber" name="1293" href="#1293">1293</a>                                     + <span class="jxr_string">" remaining="</span> + nioInNetBuf.remaining()
<a class="jxr_linenumber" name="1294" href="#1294">1294</a>                                     + <span class="jxr_string">" data="</span> + ChannelBuffers.hexDump(ChannelBuffers.wrappedBuffer(nioInNetBuf)));
<a class="jxr_linenumber" name="1295" href="#1295">1295</a>                         }
<a class="jxr_linenumber" name="1296" href="#1296">1296</a>                         <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1297" href="#1297">1297</a>                     }
<a class="jxr_linenumber" name="1298" href="#1298">1298</a>                 }
<a class="jxr_linenumber" name="1299" href="#1299">1299</a>             }
<a class="jxr_linenumber" name="1300" href="#1300">1300</a> 
<a class="jxr_linenumber" name="1301" href="#1301">1301</a>             <strong class="jxr_keyword">if</strong> (needsWrap) {
<a class="jxr_linenumber" name="1302" href="#1302">1302</a>                 <em class="jxr_comment">// wrap() acquires pendingUnencryptedWrites first and then</em>
<a class="jxr_linenumber" name="1303" href="#1303">1303</a>                 <em class="jxr_comment">// handshakeLock.  If handshakeLock is already hold by the</em>
<a class="jxr_linenumber" name="1304" href="#1304">1304</a>                 <em class="jxr_comment">// current thread, calling wrap() will lead to a dead lock</em>
<a class="jxr_linenumber" name="1305" href="#1305">1305</a>                 <em class="jxr_comment">// i.e. pendingUnencryptedWrites -&gt; handshakeLock vs.</em>
<a class="jxr_linenumber" name="1306" href="#1306">1306</a>                 <em class="jxr_comment">//      handshakeLock -&gt; pendingUnencryptedLock -&gt; handshakeLock</em>
<a class="jxr_linenumber" name="1307" href="#1307">1307</a>                 <em class="jxr_comment">//</em>
<a class="jxr_linenumber" name="1308" href="#1308">1308</a>                 <em class="jxr_comment">// There is also the same issue between pendingEncryptedWrites</em>
<a class="jxr_linenumber" name="1309" href="#1309">1309</a>                 <em class="jxr_comment">// and pendingUnencryptedWrites.</em>
<a class="jxr_linenumber" name="1310" href="#1310">1310</a>                 <strong class="jxr_keyword">if</strong> (!Thread.holdsLock(handshakeLock) &amp;&amp; !pendingEncryptedWritesLock.isHeldByCurrentThread()) {
<a class="jxr_linenumber" name="1311" href="#1311">1311</a>                     wrap(ctx, channel);
<a class="jxr_linenumber" name="1312" href="#1312">1312</a>                 }
<a class="jxr_linenumber" name="1313" href="#1313">1313</a>             }
<a class="jxr_linenumber" name="1314" href="#1314">1314</a>         } <strong class="jxr_keyword">catch</strong> (SSLException e) {
<a class="jxr_linenumber" name="1315" href="#1315">1315</a>             setHandshakeFailure(channel, e);
<a class="jxr_linenumber" name="1316" href="#1316">1316</a>             <strong class="jxr_keyword">throw</strong> e;
<a class="jxr_linenumber" name="1317" href="#1317">1317</a>         } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="1318" href="#1318">1318</a>             bufferPool.releaseBuffer(nioOutAppBuf);
<a class="jxr_linenumber" name="1319" href="#1319">1319</a>         }
<a class="jxr_linenumber" name="1320" href="#1320">1320</a> 
<a class="jxr_linenumber" name="1321" href="#1321">1321</a>         <strong class="jxr_keyword">if</strong> (nettyOutAppBuf != <strong class="jxr_keyword">null</strong> &amp;&amp; nettyOutAppBuf.readable()) {
<a class="jxr_linenumber" name="1322" href="#1322">1322</a>             <strong class="jxr_keyword">return</strong> nettyOutAppBuf;
<a class="jxr_linenumber" name="1323" href="#1323">1323</a>         } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="1324" href="#1324">1324</a>             <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="1325" href="#1325">1325</a>         }
<a class="jxr_linenumber" name="1326" href="#1326">1326</a>     }
<a class="jxr_linenumber" name="1327" href="#1327">1327</a> 
<a class="jxr_linenumber" name="1328" href="#1328">1328</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> handleRenegotiation(HandshakeStatus handshakeStatus) {
<a class="jxr_linenumber" name="1329" href="#1329">1329</a>         <strong class="jxr_keyword">synchronized</strong> (handshakeLock) {
<a class="jxr_linenumber" name="1330" href="#1330">1330</a>             <strong class="jxr_keyword">if</strong> (handshakeStatus == HandshakeStatus.NOT_HANDSHAKING ||
<a class="jxr_linenumber" name="1331" href="#1331">1331</a>                 handshakeStatus == HandshakeStatus.FINISHED) {
<a class="jxr_linenumber" name="1332" href="#1332">1332</a>                 <em class="jxr_comment">// Not handshaking</em>
<a class="jxr_linenumber" name="1333" href="#1333">1333</a>                 <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="1334" href="#1334">1334</a>             }
<a class="jxr_linenumber" name="1335" href="#1335">1335</a> 
<a class="jxr_linenumber" name="1336" href="#1336">1336</a>             <strong class="jxr_keyword">if</strong> (!handshaken) {
<a class="jxr_linenumber" name="1337" href="#1337">1337</a>                 <em class="jxr_comment">// Not renegotiation</em>
<a class="jxr_linenumber" name="1338" href="#1338">1338</a>                 <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="1339" href="#1339">1339</a>             }
<a class="jxr_linenumber" name="1340" href="#1340">1340</a> 
<a class="jxr_linenumber" name="1341" href="#1341">1341</a>             <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">boolean</strong> renegotiate;
<a class="jxr_linenumber" name="1342" href="#1342">1342</a>             <strong class="jxr_keyword">if</strong> (handshaking) {
<a class="jxr_linenumber" name="1343" href="#1343">1343</a>                 <em class="jxr_comment">// Renegotiation in progress or failed already.</em>
<a class="jxr_linenumber" name="1344" href="#1344">1344</a>                 <em class="jxr_comment">// i.e. Renegotiation check has been done already below.</em>
<a class="jxr_linenumber" name="1345" href="#1345">1345</a>                 <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="1346" href="#1346">1346</a>             }
<a class="jxr_linenumber" name="1347" href="#1347">1347</a> 
<a class="jxr_linenumber" name="1348" href="#1348">1348</a>             <strong class="jxr_keyword">if</strong> (engine.isInboundDone() || engine.isOutboundDone()) {
<a class="jxr_linenumber" name="1349" href="#1349">1349</a>                 <em class="jxr_comment">// Not handshaking but closing.</em>
<a class="jxr_linenumber" name="1350" href="#1350">1350</a>                 <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="1351" href="#1351">1351</a>             }
<a class="jxr_linenumber" name="1352" href="#1352">1352</a> 
<a class="jxr_linenumber" name="1353" href="#1353">1353</a>             <strong class="jxr_keyword">if</strong> (isEnableRenegotiation()) {
<a class="jxr_linenumber" name="1354" href="#1354">1354</a>                 <em class="jxr_comment">// Continue renegotiation.</em>
<a class="jxr_linenumber" name="1355" href="#1355">1355</a>                 renegotiate = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="1356" href="#1356">1356</a>             } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="1357" href="#1357">1357</a>                 <em class="jxr_comment">// Do not renegotiate.</em>
<a class="jxr_linenumber" name="1358" href="#1358">1358</a>                 renegotiate = false;
<a class="jxr_linenumber" name="1359" href="#1359">1359</a>                 <em class="jxr_comment">// Prevent reentrance of this method.</em>
<a class="jxr_linenumber" name="1360" href="#1360">1360</a>                 handshaking = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="1361" href="#1361">1361</a>             }
<a class="jxr_linenumber" name="1362" href="#1362">1362</a> 
<a class="jxr_linenumber" name="1363" href="#1363">1363</a>             <strong class="jxr_keyword">if</strong> (renegotiate) {
<a class="jxr_linenumber" name="1364" href="#1364">1364</a>                 <em class="jxr_comment">// Renegotiate.</em>
<a class="jxr_linenumber" name="1365" href="#1365">1365</a>                 handshake();
<a class="jxr_linenumber" name="1366" href="#1366">1366</a>             } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="1367" href="#1367">1367</a>                 <em class="jxr_comment">// Raise an exception.</em>
<a class="jxr_linenumber" name="1368" href="#1368">1368</a>                 fireExceptionCaught(
<a class="jxr_linenumber" name="1369" href="#1369">1369</a>                         ctx, <strong class="jxr_keyword">new</strong> SSLException(
<a class="jxr_linenumber" name="1370" href="#1370">1370</a>                                 <span class="jxr_string">"renegotiation attempted by peer; "</span> +
<a class="jxr_linenumber" name="1371" href="#1371">1371</a>                                 <span class="jxr_string">"closing the connection"</span>));
<a class="jxr_linenumber" name="1372" href="#1372">1372</a> 
<a class="jxr_linenumber" name="1373" href="#1373">1373</a>                 <em class="jxr_comment">// Close the connection to stop renegotiation.</em>
<a class="jxr_linenumber" name="1374" href="#1374">1374</a>                 Channels.close(ctx, succeededFuture(ctx.getChannel()));
<a class="jxr_linenumber" name="1375" href="#1375">1375</a>             }
<a class="jxr_linenumber" name="1376" href="#1376">1376</a>         }
<a class="jxr_linenumber" name="1377" href="#1377">1377</a>     }
<a class="jxr_linenumber" name="1378" href="#1378">1378</a> 
<a class="jxr_linenumber" name="1379" href="#1379">1379</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="1380" href="#1380">1380</a> <em class="jxr_javadoccomment">     * Fetches all delegated tasks from the {@link SSLEngine} and runs them immediately.</em>
<a class="jxr_linenumber" name="1381" href="#1381">1381</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="1382" href="#1382">1382</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> runDelegatedTasks() {
<a class="jxr_linenumber" name="1383" href="#1383">1383</a>         <strong class="jxr_keyword">for</strong> (;;) {
<a class="jxr_linenumber" name="1384" href="#1384">1384</a>             <strong class="jxr_keyword">final</strong> Runnable task;
<a class="jxr_linenumber" name="1385" href="#1385">1385</a>             <strong class="jxr_keyword">synchronized</strong> (handshakeLock) {
<a class="jxr_linenumber" name="1386" href="#1386">1386</a>                 task = engine.getDelegatedTask();
<a class="jxr_linenumber" name="1387" href="#1387">1387</a>             }
<a class="jxr_linenumber" name="1388" href="#1388">1388</a> 
<a class="jxr_linenumber" name="1389" href="#1389">1389</a>             <strong class="jxr_keyword">if</strong> (task == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1390" href="#1390">1390</a>                 <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1391" href="#1391">1391</a>             }
<a class="jxr_linenumber" name="1392" href="#1392">1392</a> 
<a class="jxr_linenumber" name="1393" href="#1393">1393</a>             task.run();
<a class="jxr_linenumber" name="1394" href="#1394">1394</a>         }
<a class="jxr_linenumber" name="1395" href="#1395">1395</a>     }
<a class="jxr_linenumber" name="1396" href="#1396">1396</a> 
<a class="jxr_linenumber" name="1397" href="#1397">1397</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="1398" href="#1398">1398</a> <em class="jxr_javadoccomment">     * Works around some Android {@link SSLEngine} implementations that skip {@link HandshakeStatus#FINISHED} and</em>
<a class="jxr_linenumber" name="1399" href="#1399">1399</a> <em class="jxr_javadoccomment">     * go straight into {@link HandshakeStatus#NOT_HANDSHAKING} when handshake is finished.</em>
<a class="jxr_linenumber" name="1400" href="#1400">1400</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="1401" href="#1401">1401</a> <em class="jxr_javadoccomment">     * @return {@code true} if and only if the workaround has been applied and thus {@link #handshakeFuture} has been</em>
<a class="jxr_linenumber" name="1402" href="#1402">1402</a> <em class="jxr_javadoccomment">     *         marked as success by this method</em>
<a class="jxr_linenumber" name="1403" href="#1403">1403</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="1404" href="#1404">1404</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">boolean</strong> setHandshakeSuccessIfStillHandshaking(<a href="../../../../../org/jboss/netty/channel/Channel.html">Channel</a> channel) {
<a class="jxr_linenumber" name="1405" href="#1405">1405</a>         <strong class="jxr_keyword">if</strong> (handshaking &amp;&amp; !handshakeFuture.isDone()) {
<a class="jxr_linenumber" name="1406" href="#1406">1406</a>             setHandshakeSuccess(channel);
<a class="jxr_linenumber" name="1407" href="#1407">1407</a>             <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="1408" href="#1408">1408</a>         }
<a class="jxr_linenumber" name="1409" href="#1409">1409</a>         <strong class="jxr_keyword">return</strong> false;
<a class="jxr_linenumber" name="1410" href="#1410">1410</a>     }
<a class="jxr_linenumber" name="1411" href="#1411">1411</a> 
<a class="jxr_linenumber" name="1412" href="#1412">1412</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> setHandshakeSuccess(<a href="../../../../../org/jboss/netty/channel/Channel.html">Channel</a> channel) {
<a class="jxr_linenumber" name="1413" href="#1413">1413</a>         <strong class="jxr_keyword">synchronized</strong> (handshakeLock) {
<a class="jxr_linenumber" name="1414" href="#1414">1414</a>             handshaking = false;
<a class="jxr_linenumber" name="1415" href="#1415">1415</a>             handshaken = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="1416" href="#1416">1416</a> 
<a class="jxr_linenumber" name="1417" href="#1417">1417</a>             <strong class="jxr_keyword">if</strong> (handshakeFuture == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1418" href="#1418">1418</a>                 handshakeFuture = future(channel);
<a class="jxr_linenumber" name="1419" href="#1419">1419</a>             }
<a class="jxr_linenumber" name="1420" href="#1420">1420</a>             cancelHandshakeTimeout();
<a class="jxr_linenumber" name="1421" href="#1421">1421</a>         }
<a class="jxr_linenumber" name="1422" href="#1422">1422</a> 
<a class="jxr_linenumber" name="1423" href="#1423">1423</a>         <strong class="jxr_keyword">if</strong> (logger.isDebugEnabled()) {
<a class="jxr_linenumber" name="1424" href="#1424">1424</a>             logger.debug(channel + <span class="jxr_string">" HANDSHAKEN: "</span> + engine.getSession().getCipherSuite());
<a class="jxr_linenumber" name="1425" href="#1425">1425</a>         }
<a class="jxr_linenumber" name="1426" href="#1426">1426</a> 
<a class="jxr_linenumber" name="1427" href="#1427">1427</a>         handshakeFuture.setSuccess();
<a class="jxr_linenumber" name="1428" href="#1428">1428</a>     }
<a class="jxr_linenumber" name="1429" href="#1429">1429</a> 
<a class="jxr_linenumber" name="1430" href="#1430">1430</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> setHandshakeFailure(<a href="../../../../../org/jboss/netty/channel/Channel.html">Channel</a> channel, SSLException cause) {
<a class="jxr_linenumber" name="1431" href="#1431">1431</a>         <strong class="jxr_keyword">synchronized</strong> (handshakeLock) {
<a class="jxr_linenumber" name="1432" href="#1432">1432</a>             <strong class="jxr_keyword">if</strong> (!handshaking) {
<a class="jxr_linenumber" name="1433" href="#1433">1433</a>                 <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="1434" href="#1434">1434</a>             }
<a class="jxr_linenumber" name="1435" href="#1435">1435</a>             handshaking = false;
<a class="jxr_linenumber" name="1436" href="#1436">1436</a>             handshaken = false;
<a class="jxr_linenumber" name="1437" href="#1437">1437</a> 
<a class="jxr_linenumber" name="1438" href="#1438">1438</a>             <strong class="jxr_keyword">if</strong> (handshakeFuture == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1439" href="#1439">1439</a>                 handshakeFuture = future(channel);
<a class="jxr_linenumber" name="1440" href="#1440">1440</a>             }
<a class="jxr_linenumber" name="1441" href="#1441">1441</a> 
<a class="jxr_linenumber" name="1442" href="#1442">1442</a>             <em class="jxr_comment">// cancel the timeout now</em>
<a class="jxr_linenumber" name="1443" href="#1443">1443</a>             cancelHandshakeTimeout();
<a class="jxr_linenumber" name="1444" href="#1444">1444</a> 
<a class="jxr_linenumber" name="1445" href="#1445">1445</a>             <em class="jxr_comment">// Release all resources such as internal buffers that SSLEngine</em>
<a class="jxr_linenumber" name="1446" href="#1446">1446</a>             <em class="jxr_comment">// is managing.</em>
<a class="jxr_linenumber" name="1447" href="#1447">1447</a> 
<a class="jxr_linenumber" name="1448" href="#1448">1448</a>             engine.closeOutbound();
<a class="jxr_linenumber" name="1449" href="#1449">1449</a> 
<a class="jxr_linenumber" name="1450" href="#1450">1450</a>             <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="1451" href="#1451">1451</a>                 engine.closeInbound();
<a class="jxr_linenumber" name="1452" href="#1452">1452</a>             } <strong class="jxr_keyword">catch</strong> (SSLException e) {
<a class="jxr_linenumber" name="1453" href="#1453">1453</a>                 <strong class="jxr_keyword">if</strong> (logger.isDebugEnabled()) {
<a class="jxr_linenumber" name="1454" href="#1454">1454</a>                     logger.debug(
<a class="jxr_linenumber" name="1455" href="#1455">1455</a>                             <span class="jxr_string">"SSLEngine.closeInbound() raised an exception after "</span> +
<a class="jxr_linenumber" name="1456" href="#1456">1456</a>                             <span class="jxr_string">"a handshake failure."</span>, e);
<a class="jxr_linenumber" name="1457" href="#1457">1457</a>                 }
<a class="jxr_linenumber" name="1458" href="#1458">1458</a>             }
<a class="jxr_linenumber" name="1459" href="#1459">1459</a>         }
<a class="jxr_linenumber" name="1460" href="#1460">1460</a> 
<a class="jxr_linenumber" name="1461" href="#1461">1461</a>         handshakeFuture.setFailure(cause);
<a class="jxr_linenumber" name="1462" href="#1462">1462</a>         <strong class="jxr_keyword">if</strong> (closeOnSslException) {
<a class="jxr_linenumber" name="1463" href="#1463">1463</a>             Channels.close(ctx, future(channel));
<a class="jxr_linenumber" name="1464" href="#1464">1464</a>         }
<a class="jxr_linenumber" name="1465" href="#1465">1465</a>     }
<a class="jxr_linenumber" name="1466" href="#1466">1466</a> 
<a class="jxr_linenumber" name="1467" href="#1467">1467</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> closeOutboundAndChannel(
<a class="jxr_linenumber" name="1468" href="#1468">1468</a>             <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> context, <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelStateEvent.html">ChannelStateEvent</a> e) {
<a class="jxr_linenumber" name="1469" href="#1469">1469</a>         <strong class="jxr_keyword">if</strong> (!e.getChannel().isConnected()) {
<a class="jxr_linenumber" name="1470" href="#1470">1470</a>             context.sendDownstream(e);
<a class="jxr_linenumber" name="1471" href="#1471">1471</a>             <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="1472" href="#1472">1472</a>         }
<a class="jxr_linenumber" name="1473" href="#1473">1473</a> 
<a class="jxr_linenumber" name="1474" href="#1474">1474</a>         <em class="jxr_comment">// Ensure that the tear-down logic beyond this point is never invoked concurrently nor multiple times.</em>
<a class="jxr_linenumber" name="1475" href="#1475">1475</a>         <strong class="jxr_keyword">if</strong> (!CLOSED_OUTBOUND_AND_CHANNEL_UPDATER.compareAndSet(<strong class="jxr_keyword">this</strong>, 0, 1)) {
<a class="jxr_linenumber" name="1476" href="#1476">1476</a>             <em class="jxr_comment">// The other thread called this method already, and thus the connection will be closed eventually.</em>
<a class="jxr_linenumber" name="1477" href="#1477">1477</a>             <em class="jxr_comment">// So, just wait until the connection is closed, and then forward the event so that the sink handles</em>
<a class="jxr_linenumber" name="1478" href="#1478">1478</a>             <em class="jxr_comment">// the duplicate close attempt.</em>
<a class="jxr_linenumber" name="1479" href="#1479">1479</a>             e.getChannel().getCloseFuture().addListener(<strong class="jxr_keyword">new</strong> ChannelFutureListener() {
<a class="jxr_linenumber" name="1480" href="#1480">1480</a>                 <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> operationComplete(<a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> future) <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="1481" href="#1481">1481</a>                     context.sendDownstream(e);
<a class="jxr_linenumber" name="1482" href="#1482">1482</a>                 }
<a class="jxr_linenumber" name="1483" href="#1483">1483</a>             });
<a class="jxr_linenumber" name="1484" href="#1484">1484</a>             <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="1485" href="#1485">1485</a>         }
<a class="jxr_linenumber" name="1486" href="#1486">1486</a> 
<a class="jxr_linenumber" name="1487" href="#1487">1487</a>         <strong class="jxr_keyword">boolean</strong> passthrough = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="1488" href="#1488">1488</a>         <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="1489" href="#1489">1489</a>             <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="1490" href="#1490">1490</a>                 unwrapNonAppData(ctx, e.getChannel(), false);
<a class="jxr_linenumber" name="1491" href="#1491">1491</a>             } <strong class="jxr_keyword">catch</strong> (SSLException ex) {
<a class="jxr_linenumber" name="1492" href="#1492">1492</a>                 <strong class="jxr_keyword">if</strong> (logger.isDebugEnabled()) {
<a class="jxr_linenumber" name="1493" href="#1493">1493</a>                     logger.debug(<span class="jxr_string">"Failed to unwrap before sending a close_notify message"</span>, ex);
<a class="jxr_linenumber" name="1494" href="#1494">1494</a>                 }
<a class="jxr_linenumber" name="1495" href="#1495">1495</a>             }
<a class="jxr_linenumber" name="1496" href="#1496">1496</a> 
<a class="jxr_linenumber" name="1497" href="#1497">1497</a>             <strong class="jxr_keyword">if</strong> (!engine.isOutboundDone()) {
<a class="jxr_linenumber" name="1498" href="#1498">1498</a>                 <strong class="jxr_keyword">if</strong> (SENT_CLOSE_NOTIFY_UPDATER.compareAndSet(<strong class="jxr_keyword">this</strong>, 0, 1)) {
<a class="jxr_linenumber" name="1499" href="#1499">1499</a>                     engine.closeOutbound();
<a class="jxr_linenumber" name="1500" href="#1500">1500</a>                     <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="1501" href="#1501">1501</a>                         <a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> closeNotifyFuture = wrapNonAppData(context, e.getChannel());
<a class="jxr_linenumber" name="1502" href="#1502">1502</a>                         closeNotifyFuture.addListener(
<a class="jxr_linenumber" name="1503" href="#1503">1503</a>                                 <strong class="jxr_keyword">new</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">ClosingChannelFutureListener</a>(context, e));
<a class="jxr_linenumber" name="1504" href="#1504">1504</a>                         passthrough = false;
<a class="jxr_linenumber" name="1505" href="#1505">1505</a>                     } <strong class="jxr_keyword">catch</strong> (SSLException ex) {
<a class="jxr_linenumber" name="1506" href="#1506">1506</a>                         <strong class="jxr_keyword">if</strong> (logger.isDebugEnabled()) {
<a class="jxr_linenumber" name="1507" href="#1507">1507</a>                             logger.debug(<span class="jxr_string">"Failed to encode a close_notify message"</span>, ex);
<a class="jxr_linenumber" name="1508" href="#1508">1508</a>                         }
<a class="jxr_linenumber" name="1509" href="#1509">1509</a>                     }
<a class="jxr_linenumber" name="1510" href="#1510">1510</a>                 }
<a class="jxr_linenumber" name="1511" href="#1511">1511</a>             }
<a class="jxr_linenumber" name="1512" href="#1512">1512</a>         } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="1513" href="#1513">1513</a>             <strong class="jxr_keyword">if</strong> (passthrough) {
<a class="jxr_linenumber" name="1514" href="#1514">1514</a>                 context.sendDownstream(e);
<a class="jxr_linenumber" name="1515" href="#1515">1515</a>             }
<a class="jxr_linenumber" name="1516" href="#1516">1516</a>         }
<a class="jxr_linenumber" name="1517" href="#1517">1517</a>     }
<a class="jxr_linenumber" name="1518" href="#1518">1518</a> 
<a class="jxr_linenumber" name="1519" href="#1519">1519</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">PendingWrite</a> {
<a class="jxr_linenumber" name="1520" href="#1520">1520</a>         <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> future;
<a class="jxr_linenumber" name="1521" href="#1521">1521</a>         <strong class="jxr_keyword">final</strong> ByteBuffer outAppBuf;
<a class="jxr_linenumber" name="1522" href="#1522">1522</a> 
<a class="jxr_linenumber" name="1523" href="#1523">1523</a>         <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">PendingWrite</a>(<a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> future, ByteBuffer outAppBuf) {
<a class="jxr_linenumber" name="1524" href="#1524">1524</a>             <strong class="jxr_keyword">this</strong>.future = future;
<a class="jxr_linenumber" name="1525" href="#1525">1525</a>             <strong class="jxr_keyword">this</strong>.outAppBuf = outAppBuf;
<a class="jxr_linenumber" name="1526" href="#1526">1526</a>         }
<a class="jxr_linenumber" name="1527" href="#1527">1527</a>     }
<a class="jxr_linenumber" name="1528" href="#1528">1528</a> 
<a class="jxr_linenumber" name="1529" href="#1529">1529</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">ClosingChannelFutureListener</a> <strong class="jxr_keyword">implements</strong> <a href="../../../../../org/jboss/netty/channel/ChannelFutureListener.html">ChannelFutureListener</a> {
<a class="jxr_linenumber" name="1530" href="#1530">1530</a> 
<a class="jxr_linenumber" name="1531" href="#1531">1531</a>         <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> context;
<a class="jxr_linenumber" name="1532" href="#1532">1532</a>         <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelStateEvent.html">ChannelStateEvent</a> e;
<a class="jxr_linenumber" name="1533" href="#1533">1533</a> 
<a class="jxr_linenumber" name="1534" href="#1534">1534</a>         <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">ClosingChannelFutureListener</a>(
<a class="jxr_linenumber" name="1535" href="#1535">1535</a>                 <a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> context, <a href="../../../../../org/jboss/netty/channel/ChannelStateEvent.html">ChannelStateEvent</a> e) {
<a class="jxr_linenumber" name="1536" href="#1536">1536</a>             <strong class="jxr_keyword">this</strong>.context = context;
<a class="jxr_linenumber" name="1537" href="#1537">1537</a>             <strong class="jxr_keyword">this</strong>.e = e;
<a class="jxr_linenumber" name="1538" href="#1538">1538</a>         }
<a class="jxr_linenumber" name="1539" href="#1539">1539</a> 
<a class="jxr_linenumber" name="1540" href="#1540">1540</a>         <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> operationComplete(<a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> closeNotifyFuture) <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="1541" href="#1541">1541</a>             <strong class="jxr_keyword">if</strong> (!(closeNotifyFuture.getCause() instanceof ClosedChannelException)) {
<a class="jxr_linenumber" name="1542" href="#1542">1542</a>                 Channels.close(context, e.getFuture());
<a class="jxr_linenumber" name="1543" href="#1543">1543</a>             } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="1544" href="#1544">1544</a>                 e.getFuture().setSuccess();
<a class="jxr_linenumber" name="1545" href="#1545">1545</a>             }
<a class="jxr_linenumber" name="1546" href="#1546">1546</a>         }
<a class="jxr_linenumber" name="1547" href="#1547">1547</a>     }
<a class="jxr_linenumber" name="1548" href="#1548">1548</a> 
<a class="jxr_linenumber" name="1549" href="#1549">1549</a>     @Override
<a class="jxr_linenumber" name="1550" href="#1550">1550</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> beforeAdd(<a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx) <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="1551" href="#1551">1551</a>         <strong class="jxr_keyword">super</strong>.beforeAdd(ctx);
<a class="jxr_linenumber" name="1552" href="#1552">1552</a>         <strong class="jxr_keyword">this</strong>.ctx = ctx;
<a class="jxr_linenumber" name="1553" href="#1553">1553</a>     }
<a class="jxr_linenumber" name="1554" href="#1554">1554</a> 
<a class="jxr_linenumber" name="1555" href="#1555">1555</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="1556" href="#1556">1556</a> <em class="jxr_javadoccomment">     * Fail all pending writes which we were not able to flush out</em>
<a class="jxr_linenumber" name="1557" href="#1557">1557</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="1558" href="#1558">1558</a>     @Override
<a class="jxr_linenumber" name="1559" href="#1559">1559</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> afterRemove(<a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx) <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="1560" href="#1560">1560</a>         closeEngine();
<a class="jxr_linenumber" name="1561" href="#1561">1561</a> 
<a class="jxr_linenumber" name="1562" href="#1562">1562</a>         <em class="jxr_comment">// there is no need for synchronization here as we do not receive downstream events anymore</em>
<a class="jxr_linenumber" name="1563" href="#1563">1563</a>         Throwable cause = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="1564" href="#1564">1564</a>         <strong class="jxr_keyword">for</strong> (;;) {
<a class="jxr_linenumber" name="1565" href="#1565">1565</a>             <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">PendingWrite</a> pw = pendingUnencryptedWrites.poll();
<a class="jxr_linenumber" name="1566" href="#1566">1566</a>             <strong class="jxr_keyword">if</strong> (pw == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1567" href="#1567">1567</a>                 <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1568" href="#1568">1568</a>             }
<a class="jxr_linenumber" name="1569" href="#1569">1569</a>             <strong class="jxr_keyword">if</strong> (cause == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1570" href="#1570">1570</a>                 cause = <strong class="jxr_keyword">new</strong> IOException(<span class="jxr_string">"Unable to write data"</span>);
<a class="jxr_linenumber" name="1571" href="#1571">1571</a>             }
<a class="jxr_linenumber" name="1572" href="#1572">1572</a>             pw.future.setFailure(cause);
<a class="jxr_linenumber" name="1573" href="#1573">1573</a>         }
<a class="jxr_linenumber" name="1574" href="#1574">1574</a> 
<a class="jxr_linenumber" name="1575" href="#1575">1575</a>         <strong class="jxr_keyword">for</strong> (;;) {
<a class="jxr_linenumber" name="1576" href="#1576">1576</a>             <a href="../../../../../org/jboss/netty/channel/MessageEvent.html">MessageEvent</a> ev = pendingEncryptedWrites.poll();
<a class="jxr_linenumber" name="1577" href="#1577">1577</a>             <strong class="jxr_keyword">if</strong> (ev == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1578" href="#1578">1578</a>                 <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1579" href="#1579">1579</a>             }
<a class="jxr_linenumber" name="1580" href="#1580">1580</a>             <strong class="jxr_keyword">if</strong> (cause == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1581" href="#1581">1581</a>                 cause = <strong class="jxr_keyword">new</strong> IOException(<span class="jxr_string">"Unable to write data"</span>);
<a class="jxr_linenumber" name="1582" href="#1582">1582</a>             }
<a class="jxr_linenumber" name="1583" href="#1583">1583</a>             ev.getFuture().setFailure(cause);
<a class="jxr_linenumber" name="1584" href="#1584">1584</a>         }
<a class="jxr_linenumber" name="1585" href="#1585">1585</a> 
<a class="jxr_linenumber" name="1586" href="#1586">1586</a>         <strong class="jxr_keyword">if</strong> (cause != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1587" href="#1587">1587</a>             fireExceptionCaughtLater(ctx, cause);
<a class="jxr_linenumber" name="1588" href="#1588">1588</a>         }
<a class="jxr_linenumber" name="1589" href="#1589">1589</a>     }
<a class="jxr_linenumber" name="1590" href="#1590">1590</a> 
<a class="jxr_linenumber" name="1591" href="#1591">1591</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="1592" href="#1592">1592</a> <em class="jxr_javadoccomment">     * Calls {@link #handshake()} once the {@link Channel} is connected</em>
<a class="jxr_linenumber" name="1593" href="#1593">1593</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="1594" href="#1594">1594</a>     @Override
<a class="jxr_linenumber" name="1595" href="#1595">1595</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> channelConnected(<strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx, <strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelStateEvent.html">ChannelStateEvent</a> e) <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="1596" href="#1596">1596</a>         <strong class="jxr_keyword">if</strong> (issueHandshake) {
<a class="jxr_linenumber" name="1597" href="#1597">1597</a>             <em class="jxr_comment">// issue and handshake and add a listener to it which will fire an exception event if</em>
<a class="jxr_linenumber" name="1598" href="#1598">1598</a>             <em class="jxr_comment">// an exception was thrown while doing the handshake</em>
<a class="jxr_linenumber" name="1599" href="#1599">1599</a>             handshake().addListener(<strong class="jxr_keyword">new</strong> ChannelFutureListener() {
<a class="jxr_linenumber" name="1600" href="#1600">1600</a> 
<a class="jxr_linenumber" name="1601" href="#1601">1601</a>                 <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> operationComplete(<a href="../../../../../org/jboss/netty/channel/ChannelFuture.html">ChannelFuture</a> future) <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="1602" href="#1602">1602</a>                     <strong class="jxr_keyword">if</strong> (future.isSuccess()) {
<a class="jxr_linenumber" name="1603" href="#1603">1603</a>                         <em class="jxr_comment">// Send the event upstream after the handshake was completed without an error.</em>
<a class="jxr_linenumber" name="1604" href="#1604">1604</a>                         <em class="jxr_comment">//</em>
<a class="jxr_linenumber" name="1605" href="#1605">1605</a>                         <em class="jxr_comment">// See https://github.com/netty/netty/issues/358</em>
<a class="jxr_linenumber" name="1606" href="#1606">1606</a>                         ctx.sendUpstream(e);
<a class="jxr_linenumber" name="1607" href="#1607">1607</a>                     }
<a class="jxr_linenumber" name="1608" href="#1608">1608</a>                 }
<a class="jxr_linenumber" name="1609" href="#1609">1609</a>             });
<a class="jxr_linenumber" name="1610" href="#1610">1610</a>         } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="1611" href="#1611">1611</a>             <strong class="jxr_keyword">super</strong>.channelConnected(ctx, e);
<a class="jxr_linenumber" name="1612" href="#1612">1612</a>         }
<a class="jxr_linenumber" name="1613" href="#1613">1613</a>     }
<a class="jxr_linenumber" name="1614" href="#1614">1614</a> 
<a class="jxr_linenumber" name="1615" href="#1615">1615</a>     <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="1616" href="#1616">1616</a> <em class="jxr_javadoccomment">     * Loop over all the pending writes and fail them.</em>
<a class="jxr_linenumber" name="1617" href="#1617">1617</a> <em class="jxr_javadoccomment">     *</em>
<a class="jxr_linenumber" name="1618" href="#1618">1618</a> <em class="jxr_javadoccomment">     * See &lt;a href="https://github.com/netty/netty/issues/305"&gt;#305&lt;/a&gt; for more details.</em>
<a class="jxr_linenumber" name="1619" href="#1619">1619</a> <em class="jxr_javadoccomment">     */</em>
<a class="jxr_linenumber" name="1620" href="#1620">1620</a>     @Override
<a class="jxr_linenumber" name="1621" href="#1621">1621</a>     <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> channelClosed(<strong class="jxr_keyword">final</strong> <a href="../../../../../org/jboss/netty/channel/ChannelHandlerContext.html">ChannelHandlerContext</a> ctx, <a href="../../../../../org/jboss/netty/channel/ChannelStateEvent.html">ChannelStateEvent</a> e) <strong class="jxr_keyword">throws</strong> Exception {
<a class="jxr_linenumber" name="1622" href="#1622">1622</a>         <em class="jxr_comment">// Move the fail of the writes to the IO-Thread to prevent possible deadlock</em>
<a class="jxr_linenumber" name="1623" href="#1623">1623</a>         <em class="jxr_comment">// See https://github.com/netty/netty/issues/989</em>
<a class="jxr_linenumber" name="1624" href="#1624">1624</a>         ctx.getPipeline().execute(<strong class="jxr_keyword">new</strong> Runnable() {
<a class="jxr_linenumber" name="1625" href="#1625">1625</a>             <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> run() {
<a class="jxr_linenumber" name="1626" href="#1626">1626</a>                 <strong class="jxr_keyword">if</strong> (!pendingUnencryptedWritesLock.tryLock()) {
<a class="jxr_linenumber" name="1627" href="#1627">1627</a>                     <strong class="jxr_keyword">return</strong>;
<a class="jxr_linenumber" name="1628" href="#1628">1628</a>                 }
<a class="jxr_linenumber" name="1629" href="#1629">1629</a> 
<a class="jxr_linenumber" name="1630" href="#1630">1630</a>                 List&lt;ChannelFuture&gt; futures = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="1631" href="#1631">1631</a>                 <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="1632" href="#1632">1632</a>                     <strong class="jxr_keyword">for</strong> (;;) {
<a class="jxr_linenumber" name="1633" href="#1633">1633</a>                         <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">PendingWrite</a> pw = pendingUnencryptedWrites.poll();
<a class="jxr_linenumber" name="1634" href="#1634">1634</a>                         <strong class="jxr_keyword">if</strong> (pw == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1635" href="#1635">1635</a>                             <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1636" href="#1636">1636</a>                         }
<a class="jxr_linenumber" name="1637" href="#1637">1637</a>                         <strong class="jxr_keyword">if</strong> (futures == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1638" href="#1638">1638</a>                             futures = <strong class="jxr_keyword">new</strong> ArrayList&lt;ChannelFuture&gt;();
<a class="jxr_linenumber" name="1639" href="#1639">1639</a>                         }
<a class="jxr_linenumber" name="1640" href="#1640">1640</a>                         futures.add(pw.future);
<a class="jxr_linenumber" name="1641" href="#1641">1641</a>                     }
<a class="jxr_linenumber" name="1642" href="#1642">1642</a> 
<a class="jxr_linenumber" name="1643" href="#1643">1643</a>                     <strong class="jxr_keyword">for</strong> (;;) {
<a class="jxr_linenumber" name="1644" href="#1644">1644</a>                         <a href="../../../../../org/jboss/netty/channel/MessageEvent.html">MessageEvent</a> ev = pendingEncryptedWrites.poll();
<a class="jxr_linenumber" name="1645" href="#1645">1645</a>                         <strong class="jxr_keyword">if</strong> (ev == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1646" href="#1646">1646</a>                             <strong class="jxr_keyword">break</strong>;
<a class="jxr_linenumber" name="1647" href="#1647">1647</a>                         }
<a class="jxr_linenumber" name="1648" href="#1648">1648</a>                         <strong class="jxr_keyword">if</strong> (futures == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1649" href="#1649">1649</a>                             futures = <strong class="jxr_keyword">new</strong> ArrayList&lt;ChannelFuture&gt;();
<a class="jxr_linenumber" name="1650" href="#1650">1650</a>                         }
<a class="jxr_linenumber" name="1651" href="#1651">1651</a>                         futures.add(ev.getFuture());
<a class="jxr_linenumber" name="1652" href="#1652">1652</a>                     }
<a class="jxr_linenumber" name="1653" href="#1653">1653</a>                 } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="1654" href="#1654">1654</a>                     pendingUnencryptedWritesLock.unlock();
<a class="jxr_linenumber" name="1655" href="#1655">1655</a>                 }
<a class="jxr_linenumber" name="1656" href="#1656">1656</a> 
<a class="jxr_linenumber" name="1657" href="#1657">1657</a>                 <strong class="jxr_keyword">if</strong> (futures != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1658" href="#1658">1658</a>                     <strong class="jxr_keyword">final</strong> ClosedChannelException cause = <strong class="jxr_keyword">new</strong> ClosedChannelException();
<a class="jxr_linenumber" name="1659" href="#1659">1659</a>                     <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">int</strong> size = futures.size();
<a class="jxr_linenumber" name="1660" href="#1660">1660</a>                     <strong class="jxr_keyword">for</strong> (<strong class="jxr_keyword">int</strong> i = 0; i &lt; size; i ++) {
<a class="jxr_linenumber" name="1661" href="#1661">1661</a>                         futures.get(i).setFailure(cause);
<a class="jxr_linenumber" name="1662" href="#1662">1662</a>                     }
<a class="jxr_linenumber" name="1663" href="#1663">1663</a>                     fireExceptionCaught(ctx, cause);
<a class="jxr_linenumber" name="1664" href="#1664">1664</a>                 }
<a class="jxr_linenumber" name="1665" href="#1665">1665</a>             }
<a class="jxr_linenumber" name="1666" href="#1666">1666</a>         });
<a class="jxr_linenumber" name="1667" href="#1667">1667</a> 
<a class="jxr_linenumber" name="1668" href="#1668">1668</a>         <strong class="jxr_keyword">super</strong>.channelClosed(ctx, e);
<a class="jxr_linenumber" name="1669" href="#1669">1669</a>     }
<a class="jxr_linenumber" name="1670" href="#1670">1670</a> 
<a class="jxr_linenumber" name="1671" href="#1671">1671</a>     <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">SSLEngineInboundCloseFuture</a> <strong class="jxr_keyword">extends</strong> <a href="../../../../../org/jboss/netty/channel/DefaultChannelFuture.html">DefaultChannelFuture</a> {
<a class="jxr_linenumber" name="1672" href="#1672">1672</a>         <a href="../../../../../org/jboss/netty/handler/ssl/SslHandler.html">SSLEngineInboundCloseFuture</a>() {
<a class="jxr_linenumber" name="1673" href="#1673">1673</a>             <strong class="jxr_keyword">super</strong>(<strong class="jxr_keyword">null</strong>, <strong class="jxr_keyword">true</strong>);
<a class="jxr_linenumber" name="1674" href="#1674">1674</a>         }
<a class="jxr_linenumber" name="1675" href="#1675">1675</a> 
<a class="jxr_linenumber" name="1676" href="#1676">1676</a>         <strong class="jxr_keyword">void</strong> setClosed() {
<a class="jxr_linenumber" name="1677" href="#1677">1677</a>             <strong class="jxr_keyword">super</strong>.setSuccess();
<a class="jxr_linenumber" name="1678" href="#1678">1678</a>         }
<a class="jxr_linenumber" name="1679" href="#1679">1679</a> 
<a class="jxr_linenumber" name="1680" href="#1680">1680</a>         @Override
<a class="jxr_linenumber" name="1681" href="#1681">1681</a>         <strong class="jxr_keyword">public</strong> <a href="../../../../../org/jboss/netty/channel/Channel.html">Channel</a> getChannel() {
<a class="jxr_linenumber" name="1682" href="#1682">1682</a>             <strong class="jxr_keyword">if</strong> (ctx == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="1683" href="#1683">1683</a>                 <em class="jxr_comment">// Maybe we should better throw an IllegalStateException() ?</em>
<a class="jxr_linenumber" name="1684" href="#1684">1684</a>                 <strong class="jxr_keyword">return</strong> <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="1685" href="#1685">1685</a>             } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="1686" href="#1686">1686</a>                 <strong class="jxr_keyword">return</strong> ctx.getChannel();
<a class="jxr_linenumber" name="1687" href="#1687">1687</a>             }
<a class="jxr_linenumber" name="1688" href="#1688">1688</a>         }
<a class="jxr_linenumber" name="1689" href="#1689">1689</a> 
<a class="jxr_linenumber" name="1690" href="#1690">1690</a>         @Override
<a class="jxr_linenumber" name="1691" href="#1691">1691</a>         <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">boolean</strong> setSuccess() {
<a class="jxr_linenumber" name="1692" href="#1692">1692</a>             <strong class="jxr_keyword">return</strong> false;
<a class="jxr_linenumber" name="1693" href="#1693">1693</a>         }
<a class="jxr_linenumber" name="1694" href="#1694">1694</a> 
<a class="jxr_linenumber" name="1695" href="#1695">1695</a>         @Override
<a class="jxr_linenumber" name="1696" href="#1696">1696</a>         <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">boolean</strong> setFailure(Throwable cause) {
<a class="jxr_linenumber" name="1697" href="#1697">1697</a>             <strong class="jxr_keyword">return</strong> false;
<a class="jxr_linenumber" name="1698" href="#1698">1698</a>         }
<a class="jxr_linenumber" name="1699" href="#1699">1699</a>     }
<a class="jxr_linenumber" name="1700" href="#1700">1700</a> }
</pre>
<hr/><div id="footer">This page was automatically generated by <a href="http://maven.apache.org/">Maven</a></div></body>
</html>

